# findings

vuln_id: V-218743
rule_id: SV-218743r1111802_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Exchange Back End
  ResultHash: 655AA1250F9F447877A75E551AC19473E3E576A5
  ~~~~~
  WSUS Hosted: False

  The following invalid MIME types for OS shell program extensions are configured:

  .exe
  .dll
  .csh


vuln_id: V-218744
rule_id: SV-218744r960963_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Exchange Back End
  ResultHash: 8356F37642CEDEB903ECD7759F6B764F91491675
  ~~~~~
  Access Policy: Read,Script

  Enabled Handler Mappings:
  -----------------------------------
  Name:		xamlx-ISAPI-4.0_64bit
  Path:			*.xamlx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xamlx-ISAPI-4.0_32bit
  Path:			*.xamlx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xamlx-Integrated-4.0
  Path:			*.xamlx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		rules-ISAPI-4.0_64bit
  Path:			*.rules
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		rules-ISAPI-4.0_32bit
  Path:			*.rules
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		rules-Integrated-4.0
  Path:			*.rules
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		xoml-ISAPI-4.0_64bit
  Path:			*.xoml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xoml-ISAPI-4.0_32bit
  Path:			*.xoml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		xoml-Integrated-4.0
  Path:			*.xoml
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		svc-ISAPI-4.0_64bit
  Path:			*.svc
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		svc-ISAPI-4.0_32bit
  Path:			*.svc
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		svc-Integrated-4.0
  Path:			*.svc
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		AXD-ISAPI-4.0_64bit
  Path:			*.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		PageHandlerFactory-ISAPI-4.0_64bit
  Path:			*.aspx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		SimpleHandlerFactory-ISAPI-4.0_64bit
  Path:			*.ashx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		WebServiceHandlerFactory-ISAPI-4.0_64bit
  Path:			*.asmx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-rem-ISAPI-4.0_64bit
  Path:			*.rem
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-soap-ISAPI-4.0_64bit
  Path:			*.soap
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		aspq-ISAPI-4.0_64bit
  Path:			*.aspq
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtm-ISAPI-4.0_64bit
  Path:			*.cshtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtml-ISAPI-4.0_64bit
  Path:			*.cshtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtm-ISAPI-4.0_64bit
  Path:			*.vbhtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtml-ISAPI-4.0_64bit
  Path:			*.vbhtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		TraceHandler-Integrated-4.0
  Path:			trace.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		WebAdminHandler-Integrated-4.0
  Path:			WebAdmin.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		AssemblyResourceLoader-Integrated-4.0
  Path:			WebResource.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		PageHandlerFactory-Integrated-4.0
  Path:			*.aspx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		SimpleHandlerFactory-Integrated-4.0
  Path:			*.ashx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		WebServiceHandlerFactory-Integrated-4.0
  Path:			*.asmx
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-rem-Integrated-4.0
  Path:			*.rem
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-soap-Integrated-4.0
  Path:			*.soap
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		aspq-Integrated-4.0
  Path:			*.aspq
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		cshtm-Integrated-4.0
  Path:			*.cshtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		cshtml-Integrated-4.0
  Path:			*.cshtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		vbhtm-Integrated-4.0
  Path:			*.vbhtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		vbhtml-Integrated-4.0
  Path:			*.vbhtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		ScriptHandlerFactoryAppServices-Integrated-4.0
  Path:			*_AppService.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		ScriptResourceIntegrated-4.0
  Path:			*ScriptResource.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		AXD-ISAPI-4.0_32bit
  Path:			*.axd
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		PageHandlerFactory-ISAPI-4.0_32bit
  Path:			*.aspx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		SimpleHandlerFactory-ISAPI-4.0_32bit
  Path:			*.ashx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		WebServiceHandlerFactory-ISAPI-4.0_32bit
  Path:			*.asmx
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-rem-ISAPI-4.0_32bit
  Path:			*.rem
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		HttpRemotingHandlerFactory-soap-ISAPI-4.0_32bit
  Path:			*.soap
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		aspq-ISAPI-4.0_32bit
  Path:			*.aspq
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtm-ISAPI-4.0_32bit
  Path:			*.cshtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		cshtml-ISAPI-4.0_32bit
  Path:			*.cshtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtm-ISAPI-4.0_32bit
  Path:			*.vbhtm
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		vbhtml-ISAPI-4.0_32bit
  Path:			*.vbhtml
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		TRACEVerbHandler
  Path:			*
  State:		Enabled
  PathType:		Unspecified
  Handler:		ProtocolSupportModule
  ReqAccess:	None

  Name:		OPTIONSVerbHandler
  Path:			*
  State:		Enabled
  PathType:		Unspecified
  Handler:		ProtocolSupportModule
  ReqAccess:	None

  Name:		ExtensionlessUrlHandler-ISAPI-4.0_32bit
  Path:			*.
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		ExtensionlessUrlHandler-ISAPI-4.0_64bit
  Path:			*.
  State:		Enabled
  PathType:		Unspecified
  Handler:		IsapiModule
  ReqAccess:	Script

  Name:		ExtensionlessUrlHandler-Integrated-4.0
  Path:			*.
  State:		Enabled
  PathType:		Unspecified
  Handler:		ManagedPipelineHandler
  ReqAccess:	Script

  Name:		StaticFile
  Path:			*
  State:		Enabled
  PathType:		File or Folder
  Handler:		StaticFileModule,DefaultDocumentModule,DirectoryListingModule
  ReqAccess:	Read

  Disabled Handler Mappings:
  -----------------------------------
  Name:		ISAPI-dll
  Path:			*.dll
  State:		Disabled
  PathType:		File
  Handler:		IsapiModule
  ReqAccess:	Execute

comments:
  Documentation:
  For Handler Mappings, the ISSO must document and approve all allowable scripts the website allows (white list) and denies (black list).


vuln_id: V-218745
rule_id: SV-218745r960963_rule
status: NotAFinding
comments: None are allowed, do we still need documentation?
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Exchange Back End
  ResultHash: 2F23BA53ABD5080AF448F9773A244BEC788276EC
  ~~~~~
  Denied file extensions:
  -----------------------------------
  FileExtension:	.asax
  Allowed:		False

  FileExtension:	.ascx
  Allowed:		False

  FileExtension:	.master
  Allowed:		False

  FileExtension:	.skin
  Allowed:		False

  FileExtension:	.browser
  Allowed:		False

  FileExtension:	.sitemap
  Allowed:		False

  FileExtension:	.config
  Allowed:		False

  FileExtension:	.cs
  Allowed:		False

  FileExtension:	.csproj
  Allowed:		False

  FileExtension:	.vb
  Allowed:		False

  FileExtension:	.vbproj
  Allowed:		False

  FileExtension:	.webinfo
  Allowed:		False

  FileExtension:	.licx
  Allowed:		False

  FileExtension:	.resx
  Allowed:		False

  FileExtension:	.resources
  Allowed:		False

  FileExtension:	.mdb
  Allowed:		False

  FileExtension:	.vjsproj
  Allowed:		False

  FileExtension:	.java
  Allowed:		False

  FileExtension:	.jsl
  Allowed:		False

  FileExtension:	.ldb
  Allowed:		False

  FileExtension:	.dsdgm
  Allowed:		False

  FileExtension:	.ssdgm
  Allowed:		False

  FileExtension:	.lsad
  Allowed:		False

  FileExtension:	.ssmap
  Allowed:		False

  FileExtension:	.cd
  Allowed:		False

  FileExtension:	.dsprototype
  Allowed:		False

  FileExtension:	.lsaprototype
  Allowed:		False

  FileExtension:	.sdm
  Allowed:		False

  FileExtension:	.sdmDocument
  Allowed:		False

  FileExtension:	.mdf
  Allowed:		False

  FileExtension:	.ldf
  Allowed:		False

  FileExtension:	.ad
  Allowed:		False

  FileExtension:	.dd
  Allowed:		False

  FileExtension:	.ldd
  Allowed:		False

  FileExtension:	.sd
  Allowed:		False

  FileExtension:	.adprototype
  Allowed:		False

  FileExtension:	.lddprototype
  Allowed:		False

  FileExtension:	.exclude
  Allowed:		False

  FileExtension:	.refresh
  Allowed:		False

  FileExtension:	.compiled
  Allowed:		False

  FileExtension:	.msgx
  Allowed:		False

  FileExtension:	.vsdisco
  Allowed:		False

  FileExtension:	.rules
  Allowed:		False

  Allowed file extensions:
  -----------------------------------
  None


vuln_id: V-218748
rule_id: SV-218748r1043177_rule
status: Not_Applicable
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Exchange Back End
  ResultHash: C4AC55E057470F8E3BE8026C2E97039D7E1B552C
  ~~~~~
  Exchange service detected.  If this server only hosts Microsoft Exchange, mark this check as NA.

  Service:	MSExchangeServiceHost
  Status:	Running


vuln_id: V-218749
rule_id: SV-218749r1111805_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Exchange Back End
  ResultHash: C9147AB75E3FE047BDF3394C860E38FD3A03A4FC
  ~~~~~
  Client Certificates is NOT set to 'Require'

  Confirm if this this is a public server.  If so, mark this finding as Not Applicable.


vuln_id: V-218750
rule_id: SV-218750r961095_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 11B73503DAE06F01B5185CC126C80F8941A56D00
  ~~~~~
  Anonymous Authentication is Enabled and using the account 'IUSR' for authentication.

  IUSR is not a member of any privileged groups.


vuln_id: V-218753
rule_id: SV-218753r961152_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: F2EA50F0C244BFF62634234D1860279E15690490
  ~~~~~
  MaxURL is set to '4096'


vuln_id: V-218754
rule_id: SV-218754r961152_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 61B975D8C5C29BE38FE820498269486B83933521
  ~~~~~
  MaxAllowedContentLength is set to '30000000'


vuln_id: V-218755
rule_id: SV-218755r961152_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 0B0E1D157A012760B8EF8577018C2CE9536125C3
  ~~~~~
  MaxQueryString is set to '2048'


vuln_id: V-218757
rule_id: SV-218757r961152_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: ABDEB31F62077F38682F3B6A94057B49A3CFDE3A
  ~~~~~
  AllowDoubleEscaping is Disabled


vuln_id: V-218759
rule_id: SV-218759r961158_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 0F0103BE5E8235FF5226B744537FC12082EF2285
  ~~~~~
  Directory Browsing is Disabled


vuln_id: V-218760
rule_id: SV-218760r1022690_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 8DD7CFE973D10647A1435F5B797FDBD4463D27D1
  ~~~~~
  Error Responses is configured to 'Detailed errors for local requests and custom error pages for remote requests'

  errorMode:	DetailedLocalOnly


vuln_id: V-218761
rule_id: SV-218761r961167_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: DA86857153490799139F10F11554C3FC6F2FE873
  ~~~~~
  Debug is set to 'False'


vuln_id: V-218763
rule_id: SV-218763r1043182_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Exchange Back End
  ResultHash: 035BFA88B4D7B38B2469B08159352EBE676A9570
  ~~~~~
  Time-out is configured to '00:20:00'


vuln_id: V-218764
rule_id: SV-218764r961281_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 32AFF8CF36570A0DC084CA270EE023B4DED1D486
  ~~~~~
  There is nothing preventing an administrator from shutting down either the webservice or an individual IIS site in the event of an attack. Documentation exists describing how.


vuln_id: V-218765
rule_id: SV-218765r961392_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 6ADE9501D86E927416808AF0B186536D51A249DE
  ~~~~~
  Logs are set to roll over Daily.


vuln_id: V-218766
rule_id: SV-218766r1111809_rule
status: NotAFinding
comments: This is standard for backend, documentation needed?
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Exchange Back End
  ResultHash: 521D4FC79077E62D288C93A059A01C31D6E098D6
  ~~~~~
  Non-standard port detected.  Confirm PPSM approval.

  Below are the current HTTP and HTTPS bindings:

  http (*:81:)
  https (*:444:)


vuln_id: V-218767
rule_id: SV-218767r1111811_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: DE4BDEFF1B095675E4F6E9807E0E20D0AF504FA9
  ~~~~~

  Binding: https (*:444:)
  ===========================

  Compliant Certificates:
  ---------------------------
  Subject:			CN=mont-mb-002.montford-point.navy.mil, OU=USN, OU=PKI, OU=DoD, O=U.S. Government, C=US
  CertStore:			
  Issuer:			CN=DOD SW CA-67, OU=PKI, OU=DoD, O=U.S. Government, C=US
  FriendlyName:		MONT-MB-002.MONTFORD-POINT.navy.mil
  NotAfter:			06/08/2026 18:52:58
  Thumbprint:		76C9C9B1E8EECDDD4A3ECB0107EF19938933B161
  ApprovedChain:	True
  CertificationPath...
  (0) - DoD Root CA 3
  (1) - DOD SW CA-67
  (2) - MONT-MB-002.MONTFORD-POINT.navy.mil


vuln_id: V-218768
rule_id: SV-218768r1111814_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Exchange Back End
  ResultHash: 20F984A5D3F505EAE457B229ADD97C44EF33D3DC
  ~~~~~
  The following SSL flags are missing:

  SslRequireCert


vuln_id: V-218769
rule_id: SV-218769r961632_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Exchange Back End
  ResultHash: 88428619BE4167554B71D4EBAEE30C7BD51B4A99
  ~~~~~
  KeepSessionIdSecure is set to 'True'


vuln_id: V-218770
rule_id: SV-218770r1111816_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Exchange Back End
  ResultHash: FE11E6C510BB860B5F598EF635D52AFCEA9CEE15
  ~~~~~
  RequireSSL is set to 'False'

  CompressionEnabled is set to 'False'


vuln_id: V-218779
rule_id: SV-218779r1022698_rule
status: Not_Applicable
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT APPLICABLE on 10/23/2025
  Site: Exchange Back End
  ResultHash: 6A077B4054A7B71BCF2A558FC6BFD199ED9070AA
  ~~~~~
  CGI is not installed so this requirement is NA.


vuln_id: V-228354
rule_id: SV-228354r879526_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 19931B80E7131B77BE3BC5B9969F3D65CA69082F
  ~~~~~
  Admin Audit Log Settings
  AdminAuditLogEnabled:	True


vuln_id: V-228355
rule_id: SV-228355r879530_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: E93B95A4ADD9CAD25899E809C74CFE6B9B22C253
  ~~~~~
  CertificateDomains:	MONT-MB-002.MONTFORD-POINT.navy.mil
  Subject:		CN=MONT-MB-002.MONTFORD-POINT.navy.mil, OU=USN, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:			CN=DOD SW CA-67, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Services:			IMAP, POP
  NotAfter:			06/12/2026 18:24:02
  Thumbprint:		4474E394A46CBB595F7C2A2CF85C3E59BD4C84E6

  CertificateDomains:	mont-mb-002.montford-point.navy.mil, MONT-MB-002.MONTFORD-POINT.navy
  Subject:		CN=mont-mb-002.montford-point.navy.mil, OU=USN, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:			CN=DOD SW CA-67, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Services:			IMAP, POP, IIS, SMTP
  NotAfter:			06/08/2026 18:52:58
  Thumbprint:		76C9C9B1E8EECDDD4A3ECB0107EF19938933B161

  CertificateDomains:	
  Subject:		CN=Microsoft Exchange Server Auth Certificate
  Issuer:			CN=Microsoft Exchange Server Auth Certificate [Not DoD issued]
  Services:			SMTP
  NotAfter:			04/22/2028 17:52:30
  Thumbprint:		0E3F5680CCC5915CC6B67F86BEE0307E0B7C0DA2

  CertificateDomains:	MONT-MB-002, MONT-MB-002.MONTFORD-POINT.navy.mil
  Subject:		CN=MONT-MB-002
  Issuer:			CN=MONT-MB-002 [Not DoD issued]
  Services:			IMAP, POP, SMTP
  NotAfter:			05/19/2028 17:51:07
  Thumbprint:		3789117E46E20EB76C5406B7D0BCAE3C307F6BC3

  CertificateDomains:	WMSvc-SHA2-MONT-MB-002
  Subject:		CN=WMSvc-SHA2-MONT-MB-002
  Issuer:			CN=WMSvc-SHA2-MONT-MB-002 [Not DoD issued]
  Services:			None
  NotAfter:			05/16/2033 17:33:20
  Thumbprint:		DF9858A0D9DDF8AEF88B8D4DFAC2C6EAB81DE294


vuln_id: V-228356
rule_id: SV-228356r879533_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 01AD5D494759011CA51CA939267F080C3E8E3E9F
  ~~~~~
  Default
  DomainName:			*
  AutoForwardEnabled:	False


vuln_id: V-228357
rule_id: SV-228357r879559_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 180942F5266B090B1533C523928C24A35C3D21CD
  ~~~~~
  MONT-MB-002
  ConnectivityLogEnabled:	True


vuln_id: V-228358
rule_id: SV-228358r879559_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: FE246760DF11AD630D46674989CAFFBEDC086407
  ~~~~~
  MSExchange ADAccess\Topology
  EventLevel:	Low [Expected Lowest]

  MSExchange ADAccess\Validation
  EventLevel:	Low [Expected Lowest]

  MSExchange BackEndRehydration\Configuration
  EventLevel:	Low [Expected Lowest]

  MSExchange BackEndRehydration\Server
  EventLevel:	2 [Expected Lowest]

  MSExchange OAuth\Configuration
  EventLevel:	Low [Expected Lowest]

  MSExchange OAuth\Server
  EventLevel:	2 [Expected Lowest]

  MSExchange RBAC\RBAC
  EventLevel:	Low [Expected Lowest]

  MSExchangeADTopology\Topology
  EventLevel:	Low [Expected Lowest]


vuln_id: V-228359
rule_id: SV-228359r879559_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D6373FBD6DA5342DBCAB0C09C5DED584B7BF60D3
  ~~~~~
  Admin Audit Log Settings
  AdminAuditLogParameters:	*


vuln_id: V-228360
rule_id: SV-228360r879566_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1870BD58CEAF277A6AE44AE6A55764ED3758B85B
  ~~~~~
  MB-002-DefaultDB
  CircularLoggingEnabled:	False


vuln_id: V-228361
rule_id: SV-228361r879566_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: F788ADA2BEF7B785F4958C7948B5FA274C586D53
  ~~~~~
  MONT-MB-002
  MessageTrackingLogSubjectLoggingEnabled:	True [Expected False]


vuln_id: V-228362
rule_id: SV-228362r879566_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7F2778DBDDF6D0906F4A5033A14914FCA17D86AA
  ~~~~~
  MONT-MB-002
  MessageTrackingLogEnabled:	True


vuln_id: V-228364
rule_id: SV-228364r879587_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: ECCF4978A478F1D86DB18287E92A16E0AC2B7781
  ~~~~~
  MONT-MB-002
  ErrorReportingEnabled:	False


vuln_id: V-228366
rule_id: SV-228366r879587_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 48E477F393434DC552428C0DA68CBB9FDF7D9EDD
  ~~~~~
  Montford-Point
  CustomerFeedbackEnabled:	False


vuln_id: V-228370
rule_id: SV-228370r879584_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 106B138DC57F06622496D2E5B78A68E885DD998E
  ~~~~~
  ExecutionPolicy:	Bypass [Expected RemoteSigned]


vuln_id: V-228371
rule_id: SV-228371r944805_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 871D7FE5CA5CD09DE879D1100B6E9FE608C8A9D8
  ~~~~~
  Service:		MSExchangeIMAP4
  StartType:	Manual [Expected Disabled]


vuln_id: V-228372
rule_id: SV-228372r879587_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 9408EB38DC8342BC3CD643D6A56F6277ADE40B99
  ~~~~~
  Service:		MSExchangePOP3
  StartType:	Manual [Expected Disabled]


vuln_id: V-228373
rule_id: SV-228373r879631_rule
status: Not_Reviewed
comments: documentation
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Name             Identity         EdbFilePath
  ----             --------         -----------
  MB-002-DefaultDB MB-002-DefaultDB M:\ExchangeDB\MB-002-DefaultDB\MB-002-DefaultDB.edb


vuln_id: V-228374
rule_id: SV-228374r879633_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 249A8EC66215FCADBB6764171802D74FF0CB5F13
  ~~~~~
  MONTFORD MNOC-MAIL
  SmartHosts:	mail.msc.navy.mil


vuln_id: V-228375
rule_id: SV-228375r879636_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0F0A2FB529F9459CA8C8D64C822BDFB9A14AE8E3
  ~~~~~
  Default MONT-MB-002
  AuthMechanism:	Tls, Integrated, BasicAuth, BasicAuthRequireTLS, ExchangeServer

  Client Proxy MONT-MB-002
  AuthMechanism:	Tls, Integrated, BasicAuth, BasicAuthRequireTLS, ExchangeServer

  Default Frontend MONT-MB-002
  AuthMechanism:	Tls, Integrated, BasicAuth, BasicAuthRequireTLS, ExchangeServer

  Outbound Proxy Frontend MONT-MB-002
  AuthMechanism:	Tls, Integrated, BasicAuth, BasicAuthRequireTLS, ExchangeServer

  Client Frontend MONT-MB-002
  AuthMechanism:	Tls, Integrated, BasicAuth, BasicAuthRequireTLS


vuln_id: V-228376
rule_id: SV-228376r879642_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 47638C11304A80A28FB7481682A9AA980FABBF25
  ~~~~~
  MB-002-DefaultDB
  RetainDeletedItemsUntilBackup:	False [Expected True]


vuln_id: V-228377
rule_id: SV-228377r879642_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3641A0707F4F5F9828AF8D61B78F702E3BEED3D9
  ~~~~~
  No mailboxes have 'ForwardingSmtpAddress' configured.


vuln_id: V-228379
rule_id: SV-228379r879650_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8437028AB0D66DFD05F9CF673925678D16CBF461
  ~~~~~
  MB-002-DefaultDB
  ProhibitSendReceiveQuota
  IsUnlimited:	False [Expected True]
  Value:		2.3 GB (2,469,606,400 bytes)


vuln_id: V-228380
rule_id: SV-228380r879650_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: E46671D88E7FAA88712CCF6E1323EC60845D75AA
  ~~~~~
  MB-002-DefaultDB
  ProhibitSendQuota
  IsUnlimited:	False
  Value:		2 GB (2,147,483,648 bytes)


vuln_id: V-228381
rule_id: SV-228381r879650_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A93511D0D721D1DC88AD14E37EB1971F145FE7EC
  ~~~~~
  MB-002-DefaultDB
  MountAtStartup:	True


vuln_id: V-228382
rule_id: SV-228382r879651_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: D3DFF3D8C70E00D492107351428464E54027448A
  ~~~~~
  Default MONT-MB-002
  MaxMessageSize:	36 MB (37,748,736 bytes)

  Client Proxy MONT-MB-002
  MaxMessageSize:	36 MB (37,748,736 bytes)

  Default Frontend MONT-MB-002
  MaxMessageSize:	36 MB (37,748,736 bytes)

  Outbound Proxy Frontend MONT-MB-002
  MaxMessageSize:	36 MB (37,748,736 bytes)

  Client Frontend MONT-MB-002
  MaxMessageSize:	36 MB (37,748,736 bytes)


vuln_id: V-228383
rule_id: SV-228383r879651_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 7230593AD16221A983682459399C766F55F6354D
  ~~~~~
  Default MONT-MB-002
  MaxRecipientsPerMessage:	5000

  Client Proxy MONT-MB-002
  MaxRecipientsPerMessage:	200 [Expected 5000]

  Default Frontend MONT-MB-002
  MaxRecipientsPerMessage:	200 [Expected 5000]

  Outbound Proxy Frontend MONT-MB-002
  MaxRecipientsPerMessage:	200 [Expected 5000]

  Client Frontend MONT-MB-002
  MaxRecipientsPerMessage:	200 [Expected 5000]


vuln_id: V-228384
rule_id: SV-228384r879651_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D8C1E73A02232C118E782E1B82BC9720F69E6841
  ~~~~~
  Default MONT-MB-002
  MaxHopCount:	60

  Client Proxy MONT-MB-002
  MaxHopCount:	60

  Default Frontend MONT-MB-002
  MaxHopCount:	60

  Outbound Proxy Frontend MONT-MB-002
  MaxHopCount:	60

  Client Frontend MONT-MB-002
  MaxHopCount:	60


vuln_id: V-228385
rule_id: SV-228385r879651_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 834194A4A7D15D722E15147FA87F03E5632BA71D
  ~~~~~
  MONTFORD MNOC-MAIL
  MaxMessageSize:	35 MB (36,700,160 bytes)


vuln_id: V-228386
rule_id: SV-228386r879651_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F8A978FF11809B2FDBB73735F1F183BE74CFAD7B
  ~~~~~
  MONT-MB-002
  MaxOutboundConnections:	1000


vuln_id: V-228387
rule_id: SV-228387r879651_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A8E75044F4A192E25B2D2B3EDFD82DA6FEE4CB3F
  ~~~~~
  MaxReceiveSize
  IsUnlimited:	False
  Value:		10 MB (10,485,760 bytes)


vuln_id: V-228388
rule_id: SV-228388r879651_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AA63A9B828AB8E4A9FDF231D6695E9A2E2AD8F2B
  ~~~~~
  MaxSendSize
  IsUnlimited:	False
  Value:		10 MB (10,485,760 bytes)


vuln_id: V-228389
rule_id: SV-228389r879651_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 26636067A7CB6EAC0757F199EB34339D679AFD0D
  ~~~~~
  MONT-MB-002
  MaxPerDomainOutboundConnections:	40 [Expected 20]


vuln_id: V-228390
rule_id: SV-228390r879651_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B015A87E59B8836B88A3017C6E713B798A01E596
  ~~~~~
  MONTFORD MNOC-MAIL
  ConnectionInactivityTimeOut:	00:10:00


vuln_id: V-228391
rule_id: SV-228391r879653_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 89AEDB6D61782F30776435FEE7E9E99978D0AF04
  ~~~~~
  Default MONT-MB-002
  PermissionGroups:	ExchangeLegacyServers

  Client Proxy MONT-MB-002
  PermissionGroups:	ExchangeServers

  Default Frontend MONT-MB-002
  PermissionGroups:	AnonymousUsers, ExchangeUsers, ExchangeServers, ExchangeLegacyServers [Found AnonymousUsers]

  Outbound Proxy Frontend MONT-MB-002
  PermissionGroups:	ExchangeServers

  Client Frontend MONT-MB-002
  PermissionGroups:	ExchangeUsers


vuln_id: V-228392
rule_id: SV-228392r879653_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 6EBBBF0E17F15D624AAD5431B53223AB6A7428F1
  ~~~~~
  Default
  DomainName:		*
  AllowedOOFType:	External [Expected InternalLegacy]


vuln_id: V-228393
rule_id: SV-228393r879653_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F65A250F9ABFD150084B7FDAF74BA7C8F0B87779
  ~~~~~
  ContentFilterConfig
  Enabled:	True


vuln_id: V-228394
rule_id: SV-228394r879653_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AD96C9D5E6C604344671F19DFAA8D612FE3B24C3
  ~~~~~
  ContentFilterConfig
  Enabled:	True

  SenderFilterConfig
  Enabled:	True

  SenderIdConfig
  Enabled:	True

  Sender Reputation
  Enabled:	True


vuln_id: V-228395
rule_id: SV-228395r879653_rule
status: Not_Applicable
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 3FC99851771D3F134E9442229893EE7CF85081BD
  ~~~~~
  No internal SMTP servers are configured.


vuln_id: V-228396
rule_id: SV-228396r879653_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C547014D2DADF1389C64FAEDC51F1233F9AFEFE3
  ~~~~~
  Default
  DomainName:		*
  AutoReplyEnabled:	False


vuln_id: V-228398
rule_id: SV-228398r879653_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: CFA29C51824982F2349DD1A358C35268E97EBEE0
  ~~~~~
  MaxRecipientEnvelopeLimit
  IsUnlimited:	False
  Value:		500 [Expected 5000]


vuln_id: V-228399
rule_id: SV-228399r879673_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B8810113895A99B17130D8D5D2A5CEDB7A1E6A0E
  ~~~~~
  Default MONT-MB-002
  ConnectionTimeout:	00:10:00

  Client Proxy MONT-MB-002
  ConnectionTimeout:	00:10:00

  Default Frontend MONT-MB-002
  ConnectionTimeout:	00:10:00

  Outbound Proxy Frontend MONT-MB-002
  ConnectionTimeout:	00:10:00

  Client Frontend MONT-MB-002
  ConnectionTimeout:	00:10:00


vuln_id: V-228400
rule_id: SV-228400r879751_rule
status: Not_Reviewed
comments: documentation
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  [PS] C:\windows\system32>icacls E:\ExchangeV15\
  E:\ExchangeV15\ NT AUTHORITY\Authenticated Users:(RX)
                  NT AUTHORITY\SYSTEM:(OI)(CI)(F)
                  BUILTIN\Administrators:(OI)(CI)(F)

  Successfully processed 1 files; Failed processing 0 files


vuln_id: V-228403
rule_id: SV-228403r879756_rule
status: Not_Reviewed
comments: documentation
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 20D1AF990AB29C14E8D3BD960D9C2D996059E910
  ~~~~~
  ServiceName:	ActivID Shared Store Service
  Displayname:	ActivID Shared Store Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	AJRouter
  Displayname:	AllJoyn Router Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	ALG
  Displayname:	Application Layer Gateway Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	AppHostSvc
  Displayname:	Application Host Helper Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	AppIDSvc
  Displayname:	Application Identity
  Status:		Running
  StartType:	Automatic

  ServiceName:	Appinfo
  Displayname:	Application Information
  Status:		Running
  StartType:	Manual

  ServiceName:	AppMgmt
  Displayname:	Application Management
  Status:		Stopped
  StartType:	Manual

  ServiceName:	AppReadiness
  Displayname:	App Readiness
  Status:		Stopped
  StartType:	Manual

  ServiceName:	AppVClient
  Displayname:	Microsoft App-V Client
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	AppXSvc
  Displayname:	AppX Deployment Service (AppXSVC)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	aspnet_state
  Displayname:	ASP.NET State Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	AudioEndpointBuilder
  Displayname:	Windows Audio Endpoint Builder
  Status:		Stopped
  StartType:	Manual

  ServiceName:	Audiosrv
  Displayname:	Windows Audio
  Status:		Stopped
  StartType:	Manual

  ServiceName:	AxInstSV
  Displayname:	ActiveX Installer (AxInstSV)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	BackupExecAgentAccelerator
  Displayname:	Backup Exec Remote Agent for Windows
  Status:		Running
  StartType:	Automatic

  ServiceName:	BackupExecLockdownServer
  Displayname:	Backup Exec Lockdown Server
  Status:		Running
  StartType:	Automatic

  ServiceName:	bedbg
  Displayname:	Backup Exec Error Recording Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	BFE
  Displayname:	Base Filtering Engine
  Status:		Running
  StartType:	Automatic

  ServiceName:	BITS
  Displayname:	Background Intelligent Transfer Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	BrokerInfrastructure
  Displayname:	Background Tasks Infrastructure Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	bthserv
  Displayname:	Bluetooth Support Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	c2wts
  Displayname:	Claims to Windows Token Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	CDPSvc
  Displayname:	Connected Devices Platform Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	CDPUserSvc_2da7f023
  Displayname:	CDPUserSvc_2da7f023
  Status:		Running
  StartType:	Automatic

  ServiceName:	CertPropSvc
  Displayname:	Certificate Propagation
  Status:		Running
  StartType:	Automatic

  ServiceName:	ClipSVC
  Displayname:	Client License Service (ClipSVC)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	COMSysApp
  Displayname:	COM+ System Application
  Status:		Stopped
  StartType:	Manual

  ServiceName:	CoreMessagingRegistrar
  Displayname:	CoreMessaging
  Status:		Running
  StartType:	Automatic

  ServiceName:	CRLAutoCache
  Displayname:	CRLAutoCache
  Status:		Running
  StartType:	Automatic

  ServiceName:	CryptSvc
  Displayname:	Cryptographic Services
  Status:		Running
  StartType:	Automatic

  ServiceName:	CscService
  Displayname:	Offline Files
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	DcomLaunch
  Displayname:	DCOM Server Process Launcher
  Status:		Running
  StartType:	Automatic

  ServiceName:	DcpSvc
  Displayname:	DataCollectionPublishingService
  Status:		Stopped
  StartType:	Manual

  ServiceName:	defragsvc
  Displayname:	Optimize drives
  Status:		Stopped
  StartType:	Manual

  ServiceName:	DeviceAssociationService
  Displayname:	Device Association Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	DeviceInstall
  Displayname:	Device Install Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	DevQueryBroker
  Displayname:	DevQuery Background Discovery Broker
  Status:		Stopped
  StartType:	Manual

  ServiceName:	Dhcp
  Displayname:	DHCP Client
  Status:		Running
  StartType:	Automatic

  ServiceName:	diagnosticshub.standardcollector.service
  Displayname:	Microsoft (R) Diagnostics Hub Standard Collector Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	DiagTrack
  Displayname:	Connected User Experiences and Telemetry
  Status:		Running
  StartType:	Automatic

  ServiceName:	DmEnrollmentSvc
  Displayname:	Device Management Enrollment Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	dmwappushservice
  Displayname:	dmwappushsvc
  Status:		Stopped
  StartType:	Manual

  ServiceName:	Dnscache
  Displayname:	DNS Client
  Status:		Running
  StartType:	Automatic

  ServiceName:	dot3svc
  Displayname:	Wired AutoConfig
  Status:		Stopped
  StartType:	Manual

  ServiceName:	DPS
  Displayname:	Diagnostic Policy Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	DsmSvc
  Displayname:	Device Setup Manager
  Status:		Stopped
  StartType:	Manual

  ServiceName:	DsSvc
  Displayname:	Data Sharing Service
  Status:		Running
  StartType:	Manual

  ServiceName:	Eaphost
  Displayname:	Extensible Authentication Protocol
  Status:		Stopped
  StartType:	Manual

  ServiceName:	EFS
  Displayname:	Encrypting File System (EFS)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	embeddedmode
  Displayname:	Embedded Mode
  Status:		Stopped
  StartType:	Manual

  ServiceName:	EntAppSvc
  Displayname:	Enterprise App Management Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	EventLog
  Displayname:	Windows Event Log
  Status:		Running
  StartType:	Automatic

  ServiceName:	EventSystem
  Displayname:	COM+ Event System
  Status:		Running
  StartType:	Automatic

  ServiceName:	fdPHost
  Displayname:	Function Discovery Provider Host
  Status:		Stopped
  StartType:	Manual

  ServiceName:	FDResPub
  Displayname:	Function Discovery Resource Publication
  Status:		Stopped
  StartType:	Manual

  ServiceName:	FMS
  Displayname:	Microsoft Filtering Management Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	FontCache
  Displayname:	Windows Font Cache Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	FrameServer
  Displayname:	Windows Camera Frame Server
  Status:		Stopped
  StartType:	Manual

  ServiceName:	gpsvc
  Displayname:	Group Policy Client
  Status:		Running
  StartType:	Automatic

  ServiceName:	hidserv
  Displayname:	Human Interface Device Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	HostControllerService
  Displayname:	Microsoft Exchange Search Host Controller
  Status:		Running
  StartType:	Automatic

  ServiceName:	HvHost
  Displayname:	HV Host Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	icssvc
  Displayname:	Windows Mobile Hotspot Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	IISADMIN
  Displayname:	IIS Admin Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	IKEEXT
  Displayname:	IKE and AuthIP IPsec Keying Modules
  Status:		Running
  StartType:	Automatic

  ServiceName:	InstallRoot
  Displayname:	InstallRoot
  Status:		Running
  StartType:	Automatic

  ServiceName:	iphlpsvc
  Displayname:	IP Helper
  Status:		Running
  StartType:	Automatic

  ServiceName:	KeyIso
  Displayname:	CNG Key Isolation
  Status:		Running
  StartType:	Manual

  ServiceName:	KPSSVC
  Displayname:	KDC Proxy Server service (KPS)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	KtmRm
  Displayname:	KtmRm for Distributed Transaction Coordinator
  Status:		Stopped
  StartType:	Manual

  ServiceName:	LanmanServer
  Displayname:	Server
  Status:		Running
  StartType:	Automatic

  ServiceName:	LanmanWorkstation
  Displayname:	Workstation
  Status:		Running
  StartType:	Automatic

  ServiceName:	lfsvc
  Displayname:	Geolocation Service
  Status:		Running
  StartType:	Manual

  ServiceName:	LicenseManager
  Displayname:	Windows License Manager Service
  Status:		Running
  StartType:	Manual

  ServiceName:	lltdsvc
  Displayname:	Link-Layer Topology Discovery Mapper
  Status:		Stopped
  StartType:	Manual

  ServiceName:	lmhosts
  Displayname:	TCP/IP NetBIOS Helper
  Status:		Running
  StartType:	Manual

  ServiceName:	LSM
  Displayname:	Local Session Manager
  Status:		Running
  StartType:	Automatic

  ServiceName:	macmnsvc
  Displayname:	Trellix Agent Common Services
  Status:		Running
  StartType:	Automatic

  ServiceName:	MapsBroker
  Displayname:	Downloaded Maps Manager
  Status:		Stopped
  StartType:	Automatic

  ServiceName:	masvc
  Displayname:	Trellix Agent Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	McAfeeFramework
  Displayname:	Trellix Agent Backwards Compatibility Service
  Status:		Running
  StartType:	Manual

  ServiceName:	mfefire
  Displayname:	Trellix Firewall Core Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	mfemms
  Displayname:	Trellix Service Controller
  Status:		Running
  StartType:	Automatic

  ServiceName:	mfevtp
  Displayname:	Trellix Validation Trust Protection Service
  Status:		Running
  StartType:	Manual

  ServiceName:	MpsSvc
  Displayname:	Windows Firewall
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSComplianceAudit
  Displayname:	Microsoft Exchange Compliance Audit
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSDTC
  Displayname:	Distributed Transaction Coordinator
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeADTopology
  Displayname:	Microsoft Exchange Active Directory Topology
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeAntispamUpdate
  Displayname:	Microsoft Exchange Anti-spam Update
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeCompliance
  Displayname:	Microsoft Exchange Compliance Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeDagMgmt
  Displayname:	Microsoft Exchange DAG Management
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeDelivery
  Displayname:	Microsoft Exchange Mailbox Transport Delivery
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeDiagnostics
  Displayname:	Microsoft Exchange Diagnostics
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeEdgeSync
  Displayname:	Microsoft Exchange EdgeSync
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeFastSearch
  Displayname:	Microsoft Exchange Search
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeFrontEndTransport
  Displayname:	Microsoft Exchange Frontend Transport
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeHM
  Displayname:	Microsoft Exchange Health Manager
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeHMRecovery
  Displayname:	Microsoft Exchange Health Manager Recovery
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeImap4
  Displayname:	Microsoft Exchange IMAP4
  Status:		Stopped
  StartType:	Manual

  ServiceName:	MSExchangeIMAP4BE
  Displayname:	Microsoft Exchange IMAP4 Backend
  Status:		Stopped
  StartType:	Manual

  ServiceName:	MSExchangeIS
  Displayname:	Microsoft Exchange Information Store
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeMailboxAssistants
  Displayname:	Microsoft Exchange Mailbox Assistants
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeMailboxReplication
  Displayname:	Microsoft Exchange Mailbox Replication
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeMitigation
  Displayname:	Microsoft Exchange Emergency Mitigation Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeNotificationsBroker
  Displayname:	Microsoft Exchange Notifications Broker
  Status:		Stopped
  StartType:	Automatic

  ServiceName:	MSExchangePop3
  Displayname:	Microsoft Exchange POP3
  Status:		Stopped
  StartType:	Manual

  ServiceName:	MSExchangePOP3BE
  Displayname:	Microsoft Exchange POP3 Backend
  Status:		Stopped
  StartType:	Manual

  ServiceName:	MSExchangeRepl
  Displayname:	Microsoft Exchange Replication
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeRPC
  Displayname:	Microsoft Exchange RPC Client Access
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeServiceHost
  Displayname:	Microsoft Exchange Service Host
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeSubmission
  Displayname:	Microsoft Exchange Mailbox Transport Submission
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeThrottling
  Displayname:	Microsoft Exchange Throttling
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeTransport
  Displayname:	Microsoft Exchange Transport
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeTransportLogSearch
  Displayname:	Microsoft Exchange Transport Log Search
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeUM
  Displayname:	Microsoft Exchange Unified Messaging
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSExchangeUMCR
  Displayname:	Microsoft Exchange Unified Messaging Call Router
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSiSCSI
  Displayname:	Microsoft iSCSI Initiator Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	msiserver
  Displayname:	Windows Installer
  Status:		Stopped
  StartType:	Manual

  ServiceName:	MSME
  Displayname:	Trellix Security for Microsoft Exchange
  Status:		Running
  StartType:	Automatic

  ServiceName:	MSMEReplicationService
  Displayname:	Trellix Security for Microsoft Exchange Replication Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	MSMQ
  Displayname:	Message Queuing
  Status:		Running
  StartType:	Automatic

  ServiceName:	mtstrmd
  Displayname:	Backup Exec Deduplication Multi-threaded Streaming Agent
  Status:		Stopped
  StartType:	Manual

  ServiceName:	NcaSvc
  Displayname:	Network Connectivity Assistant
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	NcbService
  Displayname:	Network Connection Broker
  Status:		Running
  StartType:	Manual

  ServiceName:	Netlogon
  Displayname:	Netlogon
  Status:		Running
  StartType:	Automatic

  ServiceName:	Netman
  Displayname:	Network Connections
  Status:		Stopped
  StartType:	Manual

  ServiceName:	NetMsmqActivator
  Displayname:	Net.Msmq Listener Adapter
  Status:		Running
  StartType:	Automatic

  ServiceName:	NetPipeActivator
  Displayname:	Net.Pipe Listener Adapter
  Status:		Running
  StartType:	Automatic

  ServiceName:	netprofm
  Displayname:	Network List Service
  Status:		Running
  StartType:	Manual

  ServiceName:	NetSetupSvc
  Displayname:	Network Setup Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	NetTcpActivator
  Displayname:	Net.Tcp Listener Adapter
  Status:		Running
  StartType:	Automatic

  ServiceName:	NetTcpPortSharing
  Displayname:	Net.Tcp Port Sharing Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	NgcCtnrSvc
  Displayname:	Microsoft Passport Container
  Status:		Stopped
  StartType:	Manual

  ServiceName:	NgcSvc
  Displayname:	Microsoft Passport
  Status:		Stopped
  StartType:	Manual

  ServiceName:	NlaSvc
  Displayname:	Network Location Awareness
  Status:		Running
  StartType:	Automatic

  ServiceName:	nsi
  Displayname:	Network Store Interface Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	OneSyncSvc_2da7f023
  Displayname:	Sync Host_2da7f023
  Status:		Running
  StartType:	Automatic

  ServiceName:	PcaSvc
  Displayname:	Program Compatibility Assistant Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	PDVFSService
  Displayname:	Backup Exec PureDisk Filesystem Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	PerfHost
  Displayname:	Performance Counter DLL Host
  Status:		Stopped
  StartType:	Manual

  ServiceName:	PhoneSvc
  Displayname:	Phone Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	PimIndexMaintenanceSvc_2da7f023
  Displayname:	Contact Data_2da7f023
  Status:		Stopped
  StartType:	Manual

  ServiceName:	pla
  Displayname:	Performance Logs & Alerts
  Status:		Running
  StartType:	Manual

  ServiceName:	PlugPlay
  Displayname:	Plug and Play
  Status:		Running
  StartType:	Manual

  ServiceName:	PolicyAgent
  Displayname:	IPsec Policy Agent
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	Power
  Displayname:	Power
  Status:		Running
  StartType:	Automatic

  ServiceName:	PrintNotify
  Displayname:	Printer Extensions and Notifications
  Status:		Stopped
  StartType:	Manual

  ServiceName:	ProfSvc
  Displayname:	User Profile Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	QWAVE
  Displayname:	Quality Windows Audio Video Experience
  Status:		Stopped
  StartType:	Manual

  ServiceName:	RasAuto
  Displayname:	Remote Access Auto Connection Manager
  Status:		Stopped
  StartType:	Manual

  ServiceName:	RasMan
  Displayname:	Remote Access Connection Manager
  Status:		Stopped
  StartType:	Manual

  ServiceName:	RemoteAccess
  Displayname:	Routing and Remote Access
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	RemoteRegistry
  Displayname:	Remote Registry
  Status:		Running
  StartType:	Automatic

  ServiceName:	RmSvc
  Displayname:	Radio Management Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	RpcEptMapper
  Displayname:	RPC Endpoint Mapper
  Status:		Running
  StartType:	Automatic

  ServiceName:	RPCHTTPLBS
  Displayname:	RPC/HTTP Load Balancing Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	RpcLocator
  Displayname:	Remote Procedure Call (RPC) Locator
  Status:		Stopped
  StartType:	Manual

  ServiceName:	RpcSs
  Displayname:	Remote Procedure Call (RPC)
  Status:		Running
  StartType:	Automatic

  ServiceName:	RSoPProv
  Displayname:	Resultant Set of Policy Provider
  Status:		Stopped
  StartType:	Manual

  ServiceName:	sacsvr
  Displayname:	Special Administration Console Helper
  Status:		Stopped
  StartType:	Manual

  ServiceName:	SamSs
  Displayname:	Security Accounts Manager
  Status:		Running
  StartType:	Automatic

  ServiceName:	SCardSvr
  Displayname:	Smart Card
  Status:		Stopped
  StartType:	Automatic

  ServiceName:	ScDeviceEnum
  Displayname:	Smart Card Device Enumeration Service
  Status:		Running
  StartType:	Manual

  ServiceName:	Schedule
  Displayname:	Task Scheduler
  Status:		Running
  StartType:	Automatic

  ServiceName:	SCPolicySvc
  Displayname:	Smart Card Removal Policy
  Status:		Running
  StartType:	Automatic

  ServiceName:	scsrvc
  Displayname:	Trellix Solidifier
  Status:		Running
  StartType:	Automatic

  ServiceName:	SearchExchangeTracing
  Displayname:	Tracing Service for Search in Exchange 
  Status:		Running
  StartType:	Automatic

  ServiceName:	seclogon
  Displayname:	Secondary Logon
  Status:		Stopped
  StartType:	Manual

  ServiceName:	SENS
  Displayname:	System Event Notification Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	SensorDataService
  Displayname:	Sensor Data Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	SensorService
  Displayname:	Sensor Service
  Status:		Running
  StartType:	Manual

  ServiceName:	SensrSvc
  Displayname:	Sensor Monitoring Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	SessionEnv
  Displayname:	Remote Desktop Configuration
  Status:		Running
  StartType:	Manual

  ServiceName:	SharedAccess
  Displayname:	Internet Connection Sharing (ICS)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	ShellHWDetection
  Displayname:	Shell Hardware Detection
  Status:		Running
  StartType:	Automatic

  ServiceName:	smphost
  Displayname:	Microsoft Storage Spaces SMP
  Status:		Stopped
  StartType:	Manual

  ServiceName:	SNMPTRAP
  Displayname:	SNMP Trap
  Status:		Stopped
  StartType:	Manual

  ServiceName:	Spooler
  Displayname:	Print Spooler
  Status:		Stopped
  StartType:	Manual

  ServiceName:	sppsvc
  Displayname:	Software Protection
  Status:		Stopped
  StartType:	Automatic

  ServiceName:	SSDPSRV
  Displayname:	SSDP Discovery
  Status:		Running
  StartType:	Manual

  ServiceName:	SstpSvc
  Displayname:	Secure Socket Tunneling Protocol Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	StateRepository
  Displayname:	State Repository Service
  Status:		Running
  StartType:	Manual

  ServiceName:	stisvc
  Displayname:	Windows Image Acquisition (WIA)
  Status:		Stopped
  StartType:	Manual

  ServiceName:	StorSvc
  Displayname:	Storage Service
  Status:		Running
  StartType:	Manual

  ServiceName:	svsvc
  Displayname:	Spot Verifier
  Status:		Stopped
  StartType:	Manual

  ServiceName:	swprv
  Displayname:	Microsoft Software Shadow Copy Provider
  Status:		Running
  StartType:	Manual

  ServiceName:	SysMain
  Displayname:	Superfetch
  Status:		Stopped
  StartType:	Manual

  ServiceName:	SystemEventsBroker
  Displayname:	System Events Broker
  Status:		Running
  StartType:	Automatic

  ServiceName:	TabletInputService
  Displayname:	Touch Keyboard and Handwriting Panel Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	TapiSrv
  Displayname:	Telephony
  Status:		Stopped
  StartType:	Manual

  ServiceName:	TermService
  Displayname:	Remote Desktop Services
  Status:		Running
  StartType:	Manual

  ServiceName:	Themes
  Displayname:	Themes
  Status:		Running
  StartType:	Automatic

  ServiceName:	TieringEngineService
  Displayname:	Storage Tiers Management
  Status:		Stopped
  StartType:	Manual

  ServiceName:	tiledatamodelsvc
  Displayname:	Tile Data model server
  Status:		Running
  StartType:	Automatic

  ServiceName:	TimeBrokerSvc
  Displayname:	Time Broker
  Status:		Running
  StartType:	Manual

  ServiceName:	TrellixAuditManager
  Displayname:	Trellix Audit Manager Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	TrellixDLPAgentService
  Displayname:	Trellix DLP Endpoint Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	TrkWks
  Displayname:	Distributed Link Tracking Client
  Status:		Running
  StartType:	Automatic

  ServiceName:	TrustedInstaller
  Displayname:	Windows Modules Installer
  Status:		Running
  StartType:	Automatic

  ServiceName:	Tumbleweed Desktop Validator
  Displayname:	Tumbleweed Desktop Validator
  Status:		Running
  StartType:	Automatic

  ServiceName:	tzautoupdate
  Displayname:	Auto Time Zone Updater
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	UALSVC
  Displayname:	User Access Logging Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	UevAgentService
  Displayname:	User Experience Virtualization Service
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	UI0Detect
  Displayname:	Interactive Services Detection
  Status:		Stopped
  StartType:	Manual

  ServiceName:	UmRdpService
  Displayname:	Remote Desktop Services UserMode Port Redirector
  Status:		Running
  StartType:	Manual

  ServiceName:	UnistoreSvc_2da7f023
  Displayname:	User Data Storage_2da7f023
  Status:		Stopped
  StartType:	Manual

  ServiceName:	upnphost
  Displayname:	UPnP Device Host
  Status:		Stopped
  StartType:	Manual

  ServiceName:	UserDataSvc_2da7f023
  Displayname:	User Data Access_2da7f023
  Status:		Stopped
  StartType:	Manual

  ServiceName:	UserManager
  Displayname:	User Manager
  Status:		Running
  StartType:	Automatic

  ServiceName:	UsoSvc
  Displayname:	Update Orchestrator Service for Windows Update
  Status:		Stopped
  StartType:	Manual

  ServiceName:	VaultSvc
  Displayname:	Credential Manager
  Status:		Running
  StartType:	Manual

  ServiceName:	vds
  Displayname:	Virtual Disk
  Status:		Stopped
  StartType:	Manual

  ServiceName:	vmicguestinterface
  Displayname:	Hyper-V Guest Service Interface
  Status:		Stopped
  StartType:	Manual

  ServiceName:	vmicheartbeat
  Displayname:	Hyper-V Heartbeat Service
  Status:		Running
  StartType:	Manual

  ServiceName:	vmickvpexchange
  Displayname:	Hyper-V Data Exchange Service
  Status:		Running
  StartType:	Manual

  ServiceName:	vmicrdv
  Displayname:	Hyper-V Remote Desktop Virtualization Service
  Status:		Running
  StartType:	Manual

  ServiceName:	vmicshutdown
  Displayname:	Hyper-V Guest Shutdown Service
  Status:		Running
  StartType:	Manual

  ServiceName:	vmictimesync
  Displayname:	Hyper-V Time Synchronization Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	vmicvmsession
  Displayname:	Hyper-V PowerShell Direct Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	vmicvss
  Displayname:	Hyper-V Volume Shadow Copy Requestor
  Status:		Running
  StartType:	Manual

  ServiceName:	VSS
  Displayname:	Volume Shadow Copy
  Status:		Running
  StartType:	Manual

  ServiceName:	W32Time
  Displayname:	Windows Time
  Status:		Running
  StartType:	Automatic

  ServiceName:	w3logsvc
  Displayname:	W3C Logging Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	W3SVC
  Displayname:	World Wide Web Publishing Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	WalletService
  Displayname:	WalletService
  Status:		Stopped
  StartType:	Manual

  ServiceName:	WAS
  Displayname:	Windows Process Activation Service
  Status:		Running
  StartType:	Manual

  ServiceName:	WbioSrvc
  Displayname:	Windows Biometric Service
  Status:		Stopped
  StartType:	Automatic

  ServiceName:	Wcmsvc
  Displayname:	Windows Connection Manager
  Status:		Running
  StartType:	Automatic

  ServiceName:	WdiServiceHost
  Displayname:	Diagnostic Service Host
  Status:		Running
  StartType:	Manual

  ServiceName:	WdiSystemHost
  Displayname:	Diagnostic System Host
  Status:		Stopped
  StartType:	Manual

  ServiceName:	Wecsvc
  Displayname:	Windows Event Collector
  Status:		Stopped
  StartType:	Manual

  ServiceName:	WEPHOSTSVC
  Displayname:	Windows Encryption Provider Host Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	wercplsupport
  Displayname:	Problem Reports and Solutions Control Panel Support
  Status:		Stopped
  StartType:	Manual

  ServiceName:	WerSvc
  Displayname:	Windows Error Reporting Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	WiaRpc
  Displayname:	Still Image Acquisition Events
  Status:		Stopped
  StartType:	Manual

  ServiceName:	WinHttpAutoProxySvc
  Displayname:	WinHTTP Web Proxy Auto-Discovery Service
  Status:		Running
  StartType:	Manual

  ServiceName:	Winmgmt
  Displayname:	Windows Management Instrumentation
  Status:		Running
  StartType:	Automatic

  ServiceName:	WinRM
  Displayname:	Windows Remote Management (WS-Management)
  Status:		Running
  StartType:	Automatic

  ServiceName:	wisvc
  Displayname:	Windows Insider Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	wlidsvc
  Displayname:	Microsoft Account Sign-in Assistant
  Status:		Stopped
  StartType:	Manual

  ServiceName:	wmiApSrv
  Displayname:	WMI Performance Adapter
  Status:		Running
  StartType:	Manual

  ServiceName:	WMSVC
  Displayname:	Web Management Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	WPDBusEnum
  Displayname:	Portable Device Enumerator Service
  Status:		Stopped
  StartType:	Manual

  ServiceName:	WpnService
  Displayname:	Windows Push Notifications System Service
  Status:		Running
  StartType:	Automatic

  ServiceName:	WpnUserService_2da7f023
  Displayname:	Windows Push Notifications User Service_2da7f023
  Status:		Stopped
  StartType:	Manual

  ServiceName:	wsbexchange
  Displayname:	Microsoft Exchange Server Extension for Windows Server Backup
  Status:		Stopped
  StartType:	Manual

  ServiceName:	WSearch
  Displayname:	Windows Search
  Status:		Stopped
  StartType:	Disabled

  ServiceName:	wuauserv
  Displayname:	Windows Update
  Status:		Running
  StartType:	Manual

  ServiceName:	wudfsvc
  Displayname:	Windows Driver Foundation - User-mode Driver Framework
  Status:		Running
  StartType:	Manual

  ServiceName:	XblAuthManager
  Displayname:	Xbox Live Auth Manager
  Status:		Stopped
  StartType:	Manual

  ServiceName:	XblGameSave
  Displayname:	Xbox Live Game Save
  Status:		Stopped
  StartType:	Manual


vuln_id: V-228404
rule_id: SV-228404r879764_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 5FDC7A99194B45A2F4E960CE93A99C76465240AE
  ~~~~~
  MONT-MB-002\Rpc (Default Web Site)
  InternalClientAuthenticationMethod:	Ntlm
  ExternalClientAuthenticationMethod:	Negotiate [Expected Ntlm]


vuln_id: V-228406
rule_id: SV-228406r879806_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: DB9256765798EA82100E404D1BDD26FCF8546E66
  ~~~~~
  Default
  DomainName:			*
  DeliveryReportEnabled:	True [Expected False]


vuln_id: V-228407
rule_id: SV-228407r879806_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: BF6C18D61258522F266F50CFBBD9CA3CAFD4B33E
  ~~~~~
  Default
  DomainName:	*
  NDREnabled:	True [Expected False]


vuln_id: V-228408
rule_id: SV-228408r879806_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: A84891728C801098787292FDEBFD425C856D0E44
  ~~~~~
  Default MONT-MB-002
  Banner:	 [Expected 220 SMTP Server Ready]

  Client Proxy MONT-MB-002
  Banner:	 [Expected 220 SMTP Server Ready]

  Default Frontend MONT-MB-002
  Banner:	 [Expected 220 SMTP Server Ready]

  Outbound Proxy Frontend MONT-MB-002
  Banner:	 [Expected 220 SMTP Server Ready]

  Client Frontend MONT-MB-002
  Banner:	 [Expected 220 SMTP Server Ready]


vuln_id: V-228409
rule_id: SV-228409r879806_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  [PS] C:\windows\system32>Get-SendConnector | Select Name, Identity, TlsAuthLevel

  Name               Identity           TlsAuthLevel
  ----               --------           ------------
  MONTFORD MNOC-MAIL MONTFORD MNOC-MAIL


vuln_id: V-228410
rule_id: SV-228410r879806_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 46AE9BF4D3752039AF3EC8466DB7C6EF44F699D8
  ~~~~~
  No Database Availability Groups are configured.


vuln_id: V-228411
rule_id: SV-228411r879827_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: B552695B5132F2C9DD57BF8E8C53AC73BA1E25A0
  ~~~~~
  MONT-MB-002
  AdminDisplayVersion:	Version 15.1 (Build 2507.6)


vuln_id: V-228412
rule_id: SV-228412r879887_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F45BB1BC0E19B53ED45593DC884B248549E33D73
  ~~~~~
  Default Web Site
  Binding:	http (*:80:)
  Binding:	net.tcp (808:*)
  Binding:	net.msmq (localhost)
  Binding:	msmq.formatname (localhost)
  Binding:	net.pipe (*)
  Binding:	http (127.0.0.1:80:)
  Binding:	https (*:443:)
  Binding:	https (127.0.0.1:443:)


vuln_id: V-228413
rule_id: SV-228413r879664_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DAE62A699B21F03FF7E6F22DDB7071EF58DBDC8B
  ~~~~~
  Malware Agent
  Enabled:	False


vuln_id: V-228415
rule_id: SV-228415r879519_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 328145AC7C2623A6F0CA0A7CBEE7A8D4913D1B18
  ~~~~~
  MONT-MB-002
  EncryptionRequired:	True


vuln_id: V-228416
rule_id: SV-228416r879519_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F062B083353802FEED61813A94D6836C6989C745
  ~~~~~
  owa (Default Web Site)
  InternalUrl:	https://mont-mb-002.montford-point.navy.mil/owa

  ExternalUrl is not configured.


vuln_id: V-228417
rule_id: SV-228417r879519_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 4EA59F616166BD941B5943C6CD5AE4C5B913F7ED
  ~~~~~
  MONT-MB-002
  FormsAuthentication:	True [Expected False]


vuln_id: V-228418
rule_id: SV-228418r879530_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MSExchange2016MB_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 8BFE4669A6229F6E578599A2EB753E7E7EF5EF8C
  ~~~~~
  MONT-MB-002
  WindowsAuthentication:	False [Expected True]


vuln_id: V-224820
rule_id: SV-224820r1038967_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 26572079BCCF907EB437A9106FA6A046FCCE8B31
  ~~~~~
  Password for the built-in Administrator account (SHB_Admin) was last changed on 03/24/2021 16:46:13 (1673 days ago)


vuln_id: V-224827
rule_id: SV-224827r991589_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 346611FFEC18CA874CE847DB523A17BC711DFFEF
  ~~~~~
  TPM Preset = True
  TPM Ready = True
  TPM Specification Version = 2.0


vuln_id: V-224828
rule_id: SV-224828r1059570_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B6AC25614EB7418F4A5ED5C1A135A4467FB661C5
  ~~~~~
  Operating system is 'Windows Server 2016 Standard 1607' (10.0.14393)

  End of Support Date:	Jan 12, 2027
  End of Support Link:	https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2016


vuln_id: V-224831
rule_id: SV-224831r958472_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 94622EDF56DD29A3ACA656BF9588E97EB7B69BA3
  ~~~~~
  All disk file systems are NTFS or ReFS.

  Device ID:		C:
  Drive Type:		Local Disk (3)
  Volume Name:		MB-002-OS
  File System:		NTFS

  Device ID:		D:
  Drive Type:		Local Disk (3)
  Volume Name:		PROGLOGS
  File System:		NTFS

  Device ID:		E:
  Drive Type:		Local Disk (3)
  Volume Name:		Exchange
  File System:		NTFS

  Device ID:		M:
  Drive Type:		Local Disk (3)
  Volume Name:		Mailbox
  File System:		NTFS


vuln_id: V-224837
rule_id: SV-224837r958482_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 091107231BDF2B3FD0B0E6F7E2EAB14E64D0DD9B
  ~~~~~
  Failed accounts:
  ---------------------
  Name:		DOD_Admin
  SID:			S-1-5-21-3803552116-1809661109-1744339665-1000
  Enabled:		True
  Last Logon:	07/06/2023 06:02:49 [840 days]


vuln_id: V-224838
rule_id: SV-224838r958482_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A8361572FCF4DDE4D6872D094DE902234124BB6E
  ~~~~~
  No enabled accounts found that do not require a password.


vuln_id: V-224839
rule_id: SV-224839r1038967_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 03421DBAA63FB77EFDA8438D19174504036DC035
  ~~~~~
  No enabled accounts found where the password does not expire.


vuln_id: V-224841
rule_id: SV-224841r958524_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: F302F3BFDE7B2B329AD1AFE97E8A74F69D634011
  ~~~~~
  The following non-system-created shares have been identified.  Verify permissions for each is appropriate:

  Name:	address (E:\ExchangeV15\Mailbox\address)
  Path:		E:\ExchangeV15\Mailbox\address
  ---------------------------------------------
  	Identity Reference:	BUILTIN\Administrators
  	File System Rights:	FullControl
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None

  	Identity Reference:	MONTFORD-POINT\montford.exchange
  	File System Rights:	FullControl
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None

  	Identity Reference:	NT AUTHORITY\Authenticated Users
  	File System Rights:	Read, Synchronize
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None

  	Identity Reference:	NT AUTHORITY\SYSTEM
  	File System Rights:	FullControl
  	Inheritance Flags:	None
  	Propagation Flags:	None

  	Identity Reference:	NT AUTHORITY\SYSTEM
  	File System Rights:	FullControl
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None

  Name:	CertificateRequests (C:\CertificateRequests)
  Path:		C:\CertificateRequests
  ---------------------------------------------
  	Identity Reference:	BUILTIN\Administrators
  	File System Rights:	FullControl
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None

  	Identity Reference:	BUILTIN\Users
  	File System Rights:	CreateFiles
  	Inheritance Flags:	ContainerInherit
  	Propagation Flags:	None

  	Identity Reference:	BUILTIN\Users
  	File System Rights:	ReadAndExecute, Synchronize
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None

  	Identity Reference:	BUILTIN\Users
  	File System Rights:	AppendData
  	Inheritance Flags:	ContainerInherit
  	Propagation Flags:	None

  	Identity Reference:	CREATOR OWNER
  	File System Rights:	FullControl
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	InheritOnly

  	Identity Reference:	MONTFORD-POINT\montford.exchange
  	File System Rights:	FullControl
  	Inheritance Flags:	None
  	Propagation Flags:	None

  	Identity Reference:	NT AUTHORITY\SYSTEM
  	File System Rights:	FullControl
  	Inheritance Flags:	ContainerInherit, ObjectInherit
  	Propagation Flags:	None


vuln_id: V-224845
rule_id: SV-224845r958478_rule
status: Open
comments: Documentation
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 07E552EDB99739489FC1F2A1156B524187533262
  ~~~~~
  Installed Roles:
  ---------------------
  File and Storage Services
  Web Server (IIS)

  Installed Role Services:
  ---------------------
  File and iSCSI Services
  File Server
  Storage Services
  Web Server
  Common HTTP Features
  Default Document
  Directory Browsing
  HTTP Errors
  Static Content
  HTTP Redirection
  Health and Diagnostics
  HTTP Logging
  Logging Tools
  Request Monitor
  Tracing
  Performance
  Static Content Compression
  Dynamic Content Compression
  Security
  Request Filtering
  Basic Authentication
  Client Certificate Mapping Authentication
  Digest Authentication
  Windows Authentication
  Application Development
  .NET Extensibility 4.6
  ASP.NET 4.6
  ISAPI Extensions
  ISAPI Filters
  Management Tools
  IIS Management Console
  IIS 6 Management Compatibility
  IIS 6 Metabase Compatibility
  IIS 6 Management Console
  IIS 6 WMI Compatibility
  Management Service

  Installed Features:
  ---------------------
  .NET Framework 4.6 Features
  .NET Framework 4.6
  ASP.NET 4.6
  WCF Services
  HTTP Activation
  Message Queuing (MSMQ) Activation
  Named Pipe Activation
  TCP Activation
  TCP Port Sharing
  Media Foundation
  Message Queuing
  Message Queuing Services
  Message Queuing Server
  Remote Server Administration Tools
  Feature Administration Tools
  Failover Clustering Tools
  Failover Cluster Management Tools
  Failover Cluster Module for Windows PowerShell
  Failover Cluster Command Interface
  Role Administration Tools
  AD DS and AD LDS Tools
  AD DS Tools
  AD DS Snap-Ins and Command-Line Tools
  RPC over HTTP Proxy
  Windows Identity Foundation 3.5
  Windows PowerShell
  Windows PowerShell 5.1
  Windows PowerShell ISE
  Windows Process Activation Service
  Process Model
  Configuration APIs
  WoW64 Support


vuln_id: V-224866
rule_id: SV-224866r958736_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E81822B0048B9BEAC107AD442FB42E51F115EDAB
  ~~~~~
  'Reset account lockout counter after' is Configured

  LockoutDuration: 0


vuln_id: V-224868
rule_id: SV-224868r958388_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 37DB4D8F6270B14CA1853DDFD4F69D80CBDA1158
  ~~~~~
  'Reset account lockout counter after' is Configured

  ResetLockoutCount: 60


vuln_id: V-224921
rule_id: SV-224921r991589_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 129AAFAE3AF022AFE44F51ED28E32569CF7A0D22
  ~~~~~
  'Hardened UNC Paths' is configured properly.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths
  Value Name:	\\*\NETLOGON
  Value:		RequireMutualAuthentication=1, RequireIntegrity=1
  Type:		REG_SZ

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths
  Value Name:	\\*\SYSVOL
  Value:		RequireMutualAuthentication=1, RequireIntegrity=1
  Type:		REG_SZ


vuln_id: V-224923
rule_id: SV-224923r991589_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 5A95DCD6553036523AF8C7763AD372FDE3799CA2
  ~~~~~
  RequiredSecurityProperties:		1, 2
  VirtualizationBasedSecurityStatus:	1


vuln_id: V-225007
rule_id: SV-225007r958726_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 195D3A4C9E0C1244F68BAB51B457A6CB3424C6A3
  ~~~~~
  The following are members of the local Administrators group:
  ---------------------
  Name:		MONTFORD-POINT\Domain Admins
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-512

  Name:		MONTFORD-POINT\Exchange Trusted Subsystem
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1134

  Name:		MONTFORD-POINT\Organization Management
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1119

  Name:		MONT-MB-002\DOD_Admin
  objectClass:	User
  objectSID:	S-1-5-21-3803552116-1809661109-1744339665-1000

  Name:		MONT-MB-002\SHB_Admin
  objectClass:	User
  objectSID:	S-1-5-21-3803552116-1809661109-1744339665-500


vuln_id: V-225008
rule_id: SV-225008r958518_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\montford.exchange
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1118
  ResultHash: E24FAFA899A9EF37673E36B9DA7CDC2E96352FB5
  ~~~~~
  'Apply UAC restrictions to local accounts on network logons' is Enabled

  Registry Path:	
  Value Name:	LocalAccountTokenFilterPolicy
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-225012
rule_id: SV-225012r991589_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: E80A78FBEDDA324884CAAB1E479460FD319F84B4
  ~~~~~
  SecurityServicesRunning:		0


vuln_id: V-225016
rule_id: SV-225016r958472_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: E719DE9AE81DFE3B722F6884328A5AF9192E5A68
  ~~~~~
  Deny log on as a batch job:

  BUILTIN\Guests


vuln_id: V-225026
rule_id: SV-225026r991589_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6756A92EE46D75E92A2A70BDAF3356EBF2DD7DAC
  ~~~~~
  'Accounts: Rename administrator account' is Configured

  NewAdministratorName: SHB_Admin


vuln_id: V-225027
rule_id: SV-225027r991589_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3F1CB8648AFBA97D4DAC6E45BD39977D47D8CA26
  ~~~~~
  'Accounts: Rename guest account' is Configured

  NewGuestName: SHB_Visitor


vuln_id: V-225069
rule_id: SV-225069r991589_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\montford.exchange
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1118
  ResultHash: E1E8733E0EB898F9D2EF428AC96620439C92F3E6
  ~~~~~
  'Do not preserve zone information in file attachments' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
  Value Name:	SaveZoneInformation (Not found)


vuln_id: V-225078
rule_id: SV-225078r958726_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3CD4E9016C9F359F5DA68C3C0F6C5C9FA18CC580
  ~~~~~
  Create symbolic links:

  BUILTIN\Administrators


vuln_id: V-225081
rule_id: SV-225081r958726_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D20741556C0CA674B7D03657501383263B6A90B2
  ~~~~~
  Generate security audits:

  IIS APPPOOL\.NET v4.5
  IIS APPPOOL\.NET v4.5 Classic
  IIS APPPOOL\DefaultAppPool
  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE


vuln_id: V-225082
rule_id: SV-225082r958726_rule
status: Open
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 5BC21D57FBD511471E1BD90139EDF70B7AE5455A
  ~~~~~
  Impersonate a client after authentication:

  BUILTIN\Administrators
  BUILTIN\IIS_IUSRS
  NT AUTHORITY\LOCAL SERVICE
  NT AUTHORITY\NETWORK SERVICE
  NT AUTHORITY\SERVICE


vuln_id: V-236000
rule_id: SV-236000r958478_rule
status: NotAFinding
hostname: MONT-MB-002
host_ip: 164.231.187.36
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\montford.exchange
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1118
  ResultHash: 77C995428C2623C12745CA5F3EB37B8F7B8DEC30
  ~~~~~
  'Turn off Preview Pane' is Enabled
  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoPreviewPane
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  'Turn on or off details pane' is Enabled: (Always hide)
  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoReadingPane
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-225234
rule_id: SV-225234r961863_rule
status: Open
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be OPEN on 10/23/2025
  ResultHash: AF47A98BC96FCBEB21F113E94CEAC638006D0F7C
  ~~~~~

  C:\Windows\SoftwareDistribution\Download\ba545051309cab7e2b01510460e805b4\inst\amd64_updateservices-services_31bf3856ad
  364e35_10.0.14393.4169_none_f48734fb19d716d8\wsusservice.exe.config


  Proxy:		NOT CLEARED and 'useSystemDefault' is NOT True


vuln_id: V-218790
rule_id: SV-218790r1067580_rule
status: Open
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 31CECBEB8262E8E4353409216F2627EBB61EFD36
  ~~~~~
  Current ACL of C:\inetpub\logs\LogFiles is:


  FileSystemRights  : FullControl
  AccessControlType : Allow
  IdentityReference : NT SERVICE\TrustedInstaller
  IsInherited       : True
  InheritanceFlags  : None
  PropagationFlags  : None

  FileSystemRights  : 268435456
  AccessControlType : Allow
  IdentityReference : NT SERVICE\TrustedInstaller
  IsInherited       : True
  InheritanceFlags  : ContainerInherit, ObjectInherit
  PropagationFlags  : InheritOnly

  FileSystemRights  : FullControl
  AccessControlType : Allow
  IdentityReference : NT AUTHORITY\SYSTEM
  IsInherited       : True
  InheritanceFlags  : None
  PropagationFlags  : None

  FileSystemRights  : 268435456
  AccessControlType : Allow
  IdentityReference : NT AUTHORITY\SYSTEM
  IsInherited       : True
  InheritanceFlags  : ContainerInherit, ObjectInherit
  PropagationFlags  : InheritOnly

  FileSystemRights  : FullControl
  AccessControlType : Allow
  IdentityReference : BUILTIN\Administrators
  IsInherited       : True
  InheritanceFlags  : None
  PropagationFlags  : None

  FileSystemRights  : 268435456
  AccessControlType : Allow
  IdentityReference : BUILTIN\Administrators
  IsInherited       : True
  InheritanceFlags  : ContainerInherit, ObjectInherit
  PropagationFlags  : InheritOnly

  FileSystemRights  : 268435456
  AccessControlType : Allow
  IdentityReference : CREATOR OWNER
  IsInherited       : True
  InheritanceFlags  : ContainerInherit, ObjectInherit
  PropagationFlags  : InheritOnly


vuln_id: V-218791
rule_id: SV-218791r960948_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 74E69E807F3DCC8CA324A8C5947BC62D9FE1A815
  ~~~~~
  Log Directory: %SystemDrive%\inetpub\logs\LogFiles

  Ensure the logs in the directory above are being backed up.


vuln_id: V-218793
rule_id: SV-218793r960963_rule
status: Open
comments: Documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 76962F0DD58B62702CD4E14318F6671588F2664D
  ~~~~~
  Software installed on this system:

  ActivID ActivClient x64
  Axway Desktop Validator
  CRLAutoCache
  DoD Secure Host Baseline Server
  InstallRoot
  Microsoft NetBanner
  Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
  Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
  Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.42.34433
  Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.42.34433
  Trellix Agent
  Trellix Data Loss Prevention - Endpoint
  Trellix Endpoint Security Firewall
  Trellix Endpoint Security Platform
  Trellix Endpoint Security Threat Prevention
  Trellix Policy Auditor Agent
  Trellix Solidifier
  Veritas Backup Exec Remote Agent for Windows
  WinZip 27.0


vuln_id: V-218796
rule_id: SV-218796r960963_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: F07E3FF1694D085F1E553410AB7FCBBAF3112130
  ~~~~~
  Local user accounts on this system:

  DefaultAccount
  DOD_Admin
  Visitor
  X_Admin


vuln_id: V-218797
rule_id: SV-218797r960963_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 774CC3055B80C5163C0500736DC8B27D15DDBC89
  ~~~~~
  The following Windows features are installed:

  BITS
  BITS-IIS-Ext
  FileAndStorage-Services
  File-Services
  FS-FileServer
  NET-Framework-45-Core
  NET-Framework-45-Features
  NET-WCF-Services45
  NET-WCF-TCP-PortSharing45
  PowerShell
  PowerShell-ISE
  PowerShellRoot
  RDC
  RSAT
  RSAT-Bits-Server
  RSAT-Feature-Tools
  Storage-Services
  Web-App-Dev
  Web-Common-Http
  Web-Default-Doc
  Web-Dir-Browsing
  Web-Filtering
  Web-Health
  Web-Http-Errors
  Web-Http-Logging
  Web-Http-Redirect
  Web-Http-Tracing
  Web-ISAPI-Ext
  Web-Log-Libraries
  Web-Metabase
  Web-Mgmt-Compat
  Web-Mgmt-Console
  Web-Mgmt-Tools
  Web-Performance
  Web-Request-Monitor
  Web-Security
  Web-Server
  Web-Stat-Compression
  Web-Static-Content
  Web-WebServer
  WoW64-Support


vuln_id: V-218802
rule_id: SV-218802r961095_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: D895FC94452D188206C29C53687CC2115A1A7E8B
  ~~~~~
  Below is a list of local groups and their members (if any):

  Group:	Access Control Assistance Operators

  Group:	Administrators
    X_Admin
    DOD_Admin
    Server Administrator Group

  Group:	Backup Operators

  Group:	Certificate Service DCOM Access

  Group:	Cryptographic Operators

  Group:	Distributed COM Users

  Group:	Event Log Readers

  Group:	Guests
    Visitor

  Group:	Hyper-V Administrators

  Group:	IIS_IUSRS

  Group:	Network Configuration Operators

  Group:	Performance Log Users

  Group:	Performance Monitor Users

  Group:	Power Users

  Group:	Print Operators

  Group:	RDS Endpoint Servers

  Group:	RDS Management Servers

  Group:	RDS Remote Access Servers

  Group:	Remote Desktop Users

  Group:	Remote Management Users

  Group:	Replicator

  Group:	Storage Replica Administrators

  Group:	System Managed Accounts Group
    DefaultAccount

  Group:	Users
    INTERACTIVE
    Authenticated Users
    Domain Users

  Group:	ConfigMgr Remote Control Users


vuln_id: V-218804
rule_id: SV-218804r1043180_rule
status: Not_Applicable
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 2DD143332C0C53AB5EB35B604B56FEEE445E829C
  ~~~~~
  ASP.NET is not installed so this requirement is NA.


vuln_id: V-218806
rule_id: SV-218806r961122_rule
status: Open
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
comments:
  Ask for documentation on the disaster recovery methods tested and planned for the IIS 10.0 web server in the event of the necessity for rollback.


vuln_id: V-218812
rule_id: SV-218812r961278_rule
status: Not_Applicable
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 69339D5EDE3A1D594FB554D39E84CA77B3304C98
  ~~~~~
  The remote management feature of IIS is not installed so this check is Not Applicable.


vuln_id: V-218823
rule_id: SV-218823r961863_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8AE742FA7487414B54F49AFC49412799439832C2
  ~~~~~
  Local user accounts on this system.  Confirm if any are used by IIS and if so, verify that default passwords have been changed:

  Name:		DOD_Admin
  Enabled:		True
  SID:			S-1-5-21-388225469-2825430915-2362864043-1000
  Password Age:	884 days


vuln_id: V-218825
rule_id: SV-218825r1067593_rule
status: Not_Applicable
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 6A81CFB5FAEC020EBE01969D6D62DB287F410304
  ~~~~~
  IIS .NET Extensibility features are not installed so this requirement is NA.


vuln_id: V-228572
rule_id: SV-228572r960963_rule
status: Not_Applicable
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Server_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 3B7C7319D6AEB5A130CFDA357A0A502827AB79ED
  ~~~~~
  SMTP-Server Feature:	Available

  System is not listening on port 25.  Confirm there are no SMTP relays using a custom port.  If no SMTP relays exist, this may be marked as 'Not Applicable'.


vuln_id: V-218735
rule_id: SV-218735r1022667_rule
status: Not_Applicable
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT APPLICABLE on 10/23/2025
  Site: Default Web Site
  ResultHash: 2DD143332C0C53AB5EB35B604B56FEEE445E829C
  ~~~~~
  ASP.NET is not installed so this requirement is NA.


vuln_id: V-218737
rule_id: SV-218737r1022671_rule
status: Open
comments: Find out: If MECM applies to this: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Default Web Site
  ResultHash: 1F8B0BF251048DDF52481451B9AA669A5C254D2B
  ~~~~~
  Require SSL is NOT enabled


vuln_id: V-218744
rule_id: SV-218744r960963_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Default Web Site
  ResultHash: 964A425E614B45D739FF9628D93B9C7268F1E643
  ~~~~~
  Access Policy: Read,Script

  Enabled Handler Mappings:
  -----------------------------------
  Name:		TRACEVerbHandler
  Path:			*
  State:		Enabled
  PathType:		Unspecified
  Handler:		ProtocolSupportModule
  ReqAccess:	None

  Name:		OPTIONSVerbHandler
  Path:			*
  State:		Enabled
  PathType:		Unspecified
  Handler:		ProtocolSupportModule
  ReqAccess:	None

  Name:		StaticFile
  Path:			*
  State:		Enabled
  PathType:		File or Folder
  Handler:		StaticFileModule,DefaultDocumentModule,DirectoryListingModule
  ReqAccess:	Read

  Disabled Handler Mappings:
  -----------------------------------
  Name:		ISAPI-dll
  Path:			*.dll
  State:		Disabled
  PathType:		File
  Handler:		IsapiModule
  ReqAccess:	Execute


vuln_id: V-218745
rule_id: SV-218745r960963_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Default Web Site
  ResultHash: AFF99CDFF730E9E82458BBFE44EC307E573D7F90
  ~~~~~
  Denied file extensions:
  -----------------------------------
  None

  Allowed file extensions:
  -----------------------------------
  None


vuln_id: V-218748
rule_id: SV-218748r1043177_rule
status: Open
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Default Web Site
  ResultHash: 8E8482E042BD27CE6D91B327DB52B5325B740854
  ~~~~~

  The site is NOT bound to a specific host header on port 80


vuln_id: V-218752
rule_id: SV-218752r1111807_rule
status: Open
comments: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Default Web Site
  ResultHash: 82833DC68D5FCB33EF4976B85E80237A71D613C3
  ~~~~~
  Both the OS and the web site are installed on C:


vuln_id: V-218756
rule_id: SV-218756r961152_rule
status: Open
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Default Web Site
  ResultHash: 545E96FB53E421DBB94A039FB5D6FBC26514D6A0
  ~~~~~
  AllowHighBitCharacters is Enabled


vuln_id: V-218758
rule_id: SV-218758r1067598_rule
status: Open
comments: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Default Web Site
  ResultHash: B5726175B8459E9B878193D0B97D55FA98562ED9
  ~~~~~
  AllowUnlisted is Enabled


vuln_id: V-218762
rule_id: SV-218762r1043182_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Default Web Site
  ResultHash: 014F652F7321865AAC624F62B49DF31D1BF1CA97
  ~~~~~
  Idle Time-out is configured to '20' total minutes


vuln_id: V-218766
rule_id: SV-218766r1111809_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Default Web Site
  ResultHash: D43BD30938BEE28D70E09D5B397315762DD4C2D3
  ~~~~~
  All ports are PPSM approved.

  Below are the current HTTP and HTTPS bindings:

  http (*:80:)


vuln_id: V-218767
rule_id: SV-218767r1111811_rule
status: Open
comments: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Default Web Site
  ResultHash: 7B47C3FC645686A5BBF0E23296FB14E0C58713A2
  ~~~~~
  There are no HTTPS bindings on this site.


vuln_id: V-218768
rule_id: SV-218768r1111814_rule
status: Open
comments: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be OPEN on 10/23/2025
  Site: Default Web Site
  ResultHash: 6275DCDEF057117A4E22688BC519EA5B675A222E
  ~~~~~
  The following SSL flags are missing:

  Ssl
  SslRequireCert
  Ssl128


vuln_id: V-218771
rule_id: SV-218771r961863_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Default Web Site
  ResultHash: 5335ED9BAD61DF8DC37184AF69529D1843D12936
  ~~~~~
  ApplicationPool:	DefaultAppPool
  WebSiteUsage:	Default Web Site


vuln_id: V-218772
rule_id: SV-218772r1022694_rule
status: Open
comments: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Site: Default Web Site
  ResultHash: BAF2D3EE1F61FFA9175D4DB32DB811AA28139C00
  ~~~~~
  Application Pool:	DefaultAppPool
  Request Limit:		0


vuln_id: V-218775
rule_id: SV-218775r1022696_rule
status: NotAFinding
comments: If the server is hosting WSUS, this is Not Applicable.
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Default Web Site
  ResultHash: 05D5E34469F71FA7B9244DA49E0CCFE2D3E75CEF
  ~~~~~
  Compliant AppPools:
  -----------------------------------
  AppPool:	DefaultAppPool
  Condition:	time [Enabled=True; LogEnabled=True]


vuln_id: V-218777
rule_id: SV-218777r961863_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Default Web Site
  ResultHash: 3F5EC0067C0B9BAC2261D125FC239DEE7E9E7866
  ~~~~~
  Application Pool:		DefaultAppPool
  Rapid Fail Protection:	True


vuln_id: V-218778
rule_id: SV-218778r961863_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IIS10_0_Site_Checks) found this to be NOT A FINDING on 10/23/2025
  Site: Default Web Site
  ResultHash: 54ABA057C04FA00C7CA670A81B1A506030B2B977
  ~~~~~
  Application Pool:	DefaultAppPool
  Failure Interval:	5


vuln_id: V-224820
rule_id: SV-224820r1038967_rule
status: Open
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 71A62659BD0BD5A65A87B978C8A286286D2E160D
  ~~~~~
  Password for the built-in Administrator account (X_Admin) was last changed on 03/24/2021 16:46:13 (1673 days ago)


vuln_id: V-224831
rule_id: SV-224831r958472_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AE8384DF4A6DF1101B40668690E53B482CFFDD59
  ~~~~~
  All disk file systems are NTFS or ReFS.

  Device ID:		C:
  Drive Type:		Local Disk (3)
  Volume Name:		Windows
  File System:		NTFS

  Device ID:		E:
  Drive Type:		Local Disk (3)
  Volume Name:		New Volume
  File System:		NTFS


vuln_id: V-224837
rule_id: SV-224837r958482_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 4F0BBD6955A59F27ED6785FAFC2242904D0B130A
  ~~~~~
  Failed accounts:
  ---------------------
  Name:		DOD_Admin
  SID:			S-1-5-21-388225469-2825430915-2362864043-1000
  Enabled:		True
  Last Logon:	07/06/2023 06:02:53 [840 days]


vuln_id: V-224845
rule_id: SV-224845r958478_rule
status: Open
comments: documentation
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 7824D0431791E6B62B9758C503519101F503256D
  ~~~~~
  Installed Roles:
  ---------------------
  File and Storage Services
  Web Server (IIS)

  Installed Role Services:
  ---------------------
  File and iSCSI Services
  File Server
  Storage Services
  Web Server
  Common HTTP Features
  Default Document
  Directory Browsing
  HTTP Errors
  Static Content
  HTTP Redirection
  Health and Diagnostics
  HTTP Logging
  Logging Tools
  Request Monitor
  Tracing
  Performance
  Static Content Compression
  Security
  Request Filtering
  Application Development
  ISAPI Extensions
  Management Tools
  IIS Management Console
  IIS 6 Management Compatibility
  IIS 6 Metabase Compatibility

  Installed Features:
  ---------------------
  .NET Framework 4.6 Features
  .NET Framework 4.6
  WCF Services
  TCP Port Sharing
  Background Intelligent Transfer Service (BITS)
  IIS Server Extension
  Remote Differential Compression
  Remote Server Administration Tools
  Feature Administration Tools
  BITS Server Extensions Tools
  Windows PowerShell
  Windows PowerShell 5.1
  Windows PowerShell ISE
  WoW64 Support


vuln_id: V-225007
rule_id: SV-225007r958726_rule
status: NotAFinding
hostname: MONT-DP-001
host_ip: 164.231.187.44
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 26130FDD7AA4586B373FC80745ACC1E59F170514
  ~~~~~
  The following are members of the local Administrators group:
  ---------------------
  Name:		MONT-DP-001\DOD_Admin
  objectClass:	User
  objectSID:	S-1-5-21-388225469-2825430915-2362864043-1000

  Name:		MONT-DP-001\X_Admin
  objectClass:	User
  objectSID:	S-1-5-21-388225469-2825430915-2362864043-500

  Name:		MONTFORD-POINT\Server Administrator Group
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1109


vuln_id: V-243466
rule_id: SV-243466r959010_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 1852EDAFFD0549867EBD2E419B98256759732803
  ~~~~~
  Members of 'Enterprise Admins'
  =========================
  Name:				MONTFORD-POINT\Alexandra.M.Perl
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1160
  DistinguishedName:	CN=Perl\, Alexandra M.\, CTR,OU=USERS,OU=MONTFORD-POINT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  MONTFORD-POINT ALL HANDS
  MONTFORD-POINT RADIO
  MONTFORD-POINT LAN Management
  MONTFORD-POINT EO

  Name:				MONTFORD-POINT\altucker.iaadmin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1224
  DistinguishedName:	CN=Tucker\, Adam L.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Domain Administrator Group
  Domain Admins [FINDING]
  Remote Desktop Users

  Name:				MONTFORD-POINT\amperl.admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1638
  DistinguishedName:	CN=ADMIN\, AMPerl,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  MONTFORD-POINT LAN Management
  Member Server Administrator Group
  Domain Administrator Group
  Domain Admins [FINDING]
  Remote Management Users

  Name:				MONTFORD-POINT\d.admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1104
  DistinguishedName:	CN=D.Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Member Server Administrator Group
  Domain Administrator Group
  Domain Admins [FINDING]
  Schema Admins [FINDING]
  Remote Management Users
  Remote Desktop Users

  Name:				MONTFORD-POINT\jrsanders.iaadmin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1253
  DistinguishedName:	CN=Sanders\, James R.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Member Server Administrator Group
  Domain Administrator Group
  Domain Admins [FINDING]
  Remote Management Users
  Remote Desktop Users

  Name:				MONTFORD-POINT\MONT-EM-Admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1157
  DistinguishedName:	CN=MONT-EM-Admin,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Domain Administrator Group
  Domain Admins [FINDING]
  Remote Desktop Users
  Administrators [FINDING]

  Name:				MONTFORD-POINT\montford.exchange [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1118
  DistinguishedName:	CN=Exchange Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Organization Management
  Schema Admins [FINDING]
  Administrators [FINDING]

  Name:				MONTFORD-POINT\SHB_Admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-500
  DistinguishedName:	CN=SHB_Admin,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Group Policy Creator Owners
  Domain Admins [FINDING]
  Schema Admins [FINDING]
  Administrators [FINDING]

  Name:				MONTFORD-POINT\Thomas.L.Jones
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1176
  DistinguishedName:	CN=Jones\, Thomas L.\, CTR,OU=USERS,OU=MONTFORD-POINT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  MONTFORD-POINT ENG
  MONTFORD-POINT ALL HANDS
  MONTFORD-POINT RADIO
  MONTFORD-POINT LAN Management
  MONTFORD-POINT EO

  Name:				MONTFORD-POINT\TLJones.Admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1250
  DistinguishedName:	CN=Jones\, Thomas L.\, Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  MONTFORD-POINT LAN Management
  Member Server Administrator Group
  Domain Administrator Group
  Domain Admins [FINDING]
  Remote Management Users


vuln_id: V-243467
rule_id: SV-243467r959010_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 7225AB9272CF53F1FFEA5139423A0233F41DA652
  ~~~~~
  Members of 'Domain Admins'
  =========================
  Name:				MONTFORD-POINT\adsmith.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1249
  DistinguishedName:	CN=Smith\, Alexander D.\, CTR,OU=USERS,OU=MONTFORD-POINT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:

  Name:				MONTFORD-POINT\altucker.iaadmin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1224
  DistinguishedName:	CN=Tucker\, Adam L.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Domain Administrator Group
  Enterprise Admins [FINDING]
  Remote Desktop Users

  Name:				MONTFORD-POINT\amperl.admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1638
  DistinguishedName:	CN=ADMIN\, AMPerl,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  MONTFORD-POINT LAN Management
  Member Server Administrator Group
  Domain Administrator Group
  Enterprise Admins [FINDING]
  Remote Management Users

  Name:				MONTFORD-POINT\ANOC.FIM
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1203
  DistinguishedName:	CN=FIM\, ANOC,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Organization Management
  Domain Administrator Group

  Name:				MONTFORD-POINT\d.admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1104
  DistinguishedName:	CN=D.Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Member Server Administrator Group
  Domain Administrator Group
  Enterprise Admins [FINDING]
  Schema Admins [FINDING]
  Remote Management Users
  Remote Desktop Users

  Name:				MONTFORD-POINT\iwgonzalez.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1242
  DistinguishedName:	CN=Gonzalez\, Ian W.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:

  Name:				MONTFORD-POINT\jrsanders.iaadmin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1253
  DistinguishedName:	CN=Sanders\, James R.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Member Server Administrator Group
  Domain Administrator Group
  Enterprise Admins [FINDING]
  Remote Management Users
  Remote Desktop Users

  Name:				MONTFORD-POINT\jtbegarek.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1212
  DistinguishedName:	CN=IA ADMIN\, JTBegarek,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Organization Management
  Member Server Administrator Group
  Domain Administrator Group
  Domain Users

  Name:				MONTFORD-POINT\MONT-EM-Admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1157
  DistinguishedName:	CN=MONT-EM-Admin,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Domain Administrator Group
  Enterprise Admins [FINDING]
  Remote Desktop Users
  Administrators [FINDING]

  Name:				MONTFORD-POINT\montford.exchange [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1118
  DistinguishedName:	CN=Exchange Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Organization Management
  Enterprise Admins [FINDING]
  Schema Admins [FINDING]
  Administrators [FINDING]

  Name:				MONTFORD-POINT\RDRivera.IAADMIN
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1213
  DistinguishedName:	CN=Rivera\, RJ,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:

  Name:				MONTFORD-POINT\scan.admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1192
  DistinguishedName:	CN=Scan Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Workstation Administrator Group
  Member Server Administrator Group
  Remote Desktop Users

  Name:				MONTFORD-POINT\SHB_Admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-500
  DistinguishedName:	CN=SHB_Admin,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Group Policy Creator Owners
  Enterprise Admins [FINDING]
  Schema Admins [FINDING]
  Administrators [FINDING]

  Name:				MONTFORD-POINT\tagavrilovic.iaadmin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1231
  DistinguishedName:	CN=Gavrilovic\, Tyler A.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  Remote Desktop Users
  Administrators [FINDING]

  Name:				MONTFORD-POINT\TLJones.Admin [FINDING]
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1250
  DistinguishedName:	CN=Jones\, Thomas L.\, Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  OtherMemberOf:
  MONTFORD-POINT LAN Management
  Member Server Administrator Group
  Domain Administrator Group
  Enterprise Admins [FINDING]
  Remote Management Users


vuln_id: V-243473
rule_id: SV-243473r959010_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: B096C379B49B26BC871A78CA4A53DDF65C083469
  ~~~~~
  Members of 'Administrators'
  =========================
  Name:		MONTFORD-POINT\SHB_Admin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-500

  Name:		MONTFORD-POINT\DOD_Admin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1000

  Name:		MONTFORD-POINT\Enterprise Admins
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-519

  Name:		MONTFORD-POINT\Domain Admins
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-512

  Name:		MONTFORD-POINT\montford.exchange
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1118

  Name:		MONTFORD-POINT\MONT-EM-Admin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1157

  Name:		MONTFORD-POINT\Montford.backup
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1614

  Name:		MONTFORD-POINT\tagavrilovic.iaadmin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1231


vuln_id: V-243476
rule_id: SV-243476r1026173_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B9751811B5587DC898185A44CA352F1B0D09ABDF
  ~~~~~
  Domain Level:	Windows2016Domain

  Rolling of expiring NTLM Secrets:	True


vuln_id: V-243477
rule_id: SV-243477r959010_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 314B6E5CF1F8B145CB057FCD5D58C475C8C3C370
  ~~~~~
  Accounts are missing from 'Protected Users'.  Only service accounts and one (1) user account with domain level administrative privileges may be excluded.  Please confirm for compliance.

  Users Missing From 'Protected Users' Group
  ============================================
  Name:				MONTFORD-POINT\adsmith.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1249
  DistinguishedName:	CN=Smith\, Alexander D.\, CTR,OU=USERS,OU=MONTFORD-POINT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\Alexandra.M.Perl
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1160
  DistinguishedName:	CN=Perl\, Alexandra M.\, CTR,OU=USERS,OU=MONTFORD-POINT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Enterprise Admins, Schema Admins

  Name:				MONTFORD-POINT\altucker.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1224
  DistinguishedName:	CN=Tucker\, Adam L.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins

  Name:				MONTFORD-POINT\amperl.admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1638
  DistinguishedName:	CN=ADMIN\, AMPerl,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins, Schema Admins

  Name:				MONTFORD-POINT\ANOC.FIM
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1203
  DistinguishedName:	CN=FIM\, ANOC,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\d.admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1104
  DistinguishedName:	CN=D.Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins, Schema Admins

  Name:				MONTFORD-POINT\DOD_Admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1000
  DistinguishedName:	CN=DOD_Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators

  Name:				MONTFORD-POINT\iwgonzalez.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1242
  DistinguishedName:	CN=Gonzalez\, Ian W.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\jrsanders.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1253
  DistinguishedName:	CN=Sanders\, James R.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins

  Name:				MONTFORD-POINT\jtbegarek.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1212
  DistinguishedName:	CN=IA ADMIN\, JTBegarek,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\MONT-EM-Admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1157
  DistinguishedName:	CN=MONT-EM-Admin,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins

  Name:				MONTFORD-POINT\Montford.backup
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1614
  DistinguishedName:	CN=Backup,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators

  Name:				MONTFORD-POINT\montford.exchange
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1118
  DistinguishedName:	CN=Exchange Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins, Schema Admins

  Name:				MONTFORD-POINT\RDRivera.IAADMIN
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1213
  DistinguishedName:	CN=Rivera\, RJ,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\scan.admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1192
  DistinguishedName:	CN=Scan Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\SHB_Admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-500
  DistinguishedName:	CN=SHB_Admin,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins, Schema Admins

  Name:				MONTFORD-POINT\tagavrilovic.iaadmin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1231
  DistinguishedName:	CN=Gavrilovic\, Tyler A.\, CTR,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins

  Name:				MONTFORD-POINT\Thomas.L.Jones
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1176
  DistinguishedName:	CN=Jones\, Thomas L.\, CTR,OU=USERS,OU=MONTFORD-POINT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Enterprise Admins, Schema Admins

  Name:				MONTFORD-POINT\TLJones.Admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1250
  DistinguishedName:	CN=Jones\, Thomas L.\, Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  MemberOf:			Administrators, Domain Admins, Enterprise Admins, Schema Admins


vuln_id: V-243478
rule_id: SV-243478r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 55740C7819F0A0F534B0C85122BCAD1EB9746BE4
  ~~~~~
  No computers are Trusted for Delegation and have a Primary Group ID of '515'


vuln_id: V-243480
rule_id: SV-243480r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7046F3346ADC27A5DC94A4619E48DF67887115E4
  ~~~~~
  Domain Level: Windows2016Domain


vuln_id: V-243481
rule_id: SV-243481r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4B26CE40A23C1A3876E1E179534E4E0EC111E8DA
  ~~~~~
  No trusts are configured.


vuln_id: V-243482
rule_id: SV-243482r959010_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 48551156A5DDF0637531025EE03B12E7D7F6DBEE
  ~~~~~
  No trusts are configured so this requirement is NA.


vuln_id: V-243484
rule_id: SV-243484r958482_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 8AD1942BAC2D1AFD7EFD3D0B16A6E76B5300CD0B
  ~~~~~
  No 'External' or 'Forest' trusts are configured so this requirement is NA.


vuln_id: V-243486
rule_id: SV-243486r958504_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0F5A15D869BBF06C2EB5A9E95A87ED62D87DAB4F
  ~~~~~
  Both 'Anonymous Logon' and 'Everyone' are not members of 'Pre-Windows 2000 Compatible Access'.


vuln_id: V-243487
rule_id: SV-243487r959010_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: FC9B7A301E5B2EB58970D10864AFD58C1C7460A2
  ~~~~~
  No Users are in the 'Incoming Forest Trust Builders' Group

  Members of 'Group Policy Creator Owners'
  =========================
  Name:				MONTFORD-POINT\SHB_Admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-500
  DistinguishedName:	CN=SHB_Admin,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil


vuln_id: V-243489
rule_id: SV-243489r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CE99C7BC2F5744C53889CBD4D51FF39B797836D0
  ~~~~~
  No read-only domain controllers (RODC) exist in the domain.


vuln_id: V-243490
rule_id: SV-243490r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 47E7E00721432249DBC12DBEBACC7D51EB9D1FDE
  ~~~~~
  Category:		Logon
  Audit On:		Success and Failure

  Category:		User Account Management
  Audit On:		Success and Failure

  Category:		Account Lockout
  Audit On:		Success and Failure

  Category:		Security Group Management
  Audit On:		Success


  Queries of Events
  =====================
  No event was found for EventID: 4740

  No event was found for EventID: 4728

  No event was found for EventID: 4732

  No event was found for EventID: 4756

  Event ID:			4624
  Message:			An account was successfully logged on.
  Level:			Information
  Container Log:		security
  Time Created:		10/23/2025 17:18:23

  Event ID:			4625
  Message:			The EventSystem sub system is suppressing duplicate event log entries for a duration of 86400 seconds.
  Level:			Information
  Container Log:		application
  Time Created:		10/23/2025 17:00:12

  Event ID:			4648
  Message:			A logon was attempted using explicit credentials.
  Level:			Information
  Container Log:		security
  Time Created:		10/23/2025 17:14:12


vuln_id: V-243491
rule_id: SV-243491r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E089DA3611CD9E5684D67E52819E7E3F526453BF
  ~~~~~
  Category:		Logon
  Audit On:		Success and Failure

  Category:		Account Lockout
  Audit On:		Success and Failure


  Queries of Events
  =====================
  Event ID:			4624
  Message:			An account was successfully logged on.
  User:			-
  Domain:			-
  Level:			Information
  Container Log:		security
  Time Created:		10/23/2025 17:10:53

  Event ID:			4625
  Message:			An account failed to log on.
  User:			MNOCE-EMV-01$
  Domain:			ASHORE
  Level:			Information
  Container Log:		security
  Time Created:		10/23/2025 11:34:02


vuln_id: V-243492
rule_id: SV-243492r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5A31BB5A4B1EBDFAC4D7DD3C633345B86A64B193
  ~~~~~
  Category:		Logon
  Audit On:		Success and Failure


  Queries of Events
  =====================
  No event was found for EventID: 4624


vuln_id: V-243495
rule_id: SV-243495r958908_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 340AB6AA28AE4B02E7062963172834B876B28F0A
  ~~~~~
  Hostname:		MONT-DC-003.MONTFORD-POINT.navy.mil
  OperatingSystem:	Windows Server 2016 Standard
  IPv4Address:		164.231.187.34
  IPv6Address:		::1
  Forest:			MONTFORD-POINT.navy.mil
  Site:				Default-First-Site-Name
  IsGlobalCatalog:	True
  IsReadOnly:		False

  Hostname:		MONT-DC-004.MONTFORD-POINT.navy.mil
  OperatingSystem:	Windows Server 2016 Standard
  IPv4Address:		164.231.187.35
  IPv6Address:		
  Forest:			MONTFORD-POINT.navy.mil
  Site:				Default-First-Site-Name
  IsGlobalCatalog:	True
  IsReadOnly:		False


vuln_id: V-243496
rule_id: SV-243496r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C6936761C589D356CB5402667B38F66C7EB8DAA0
  ~~~~~
  'Incoming Forest Trust Builders' - Contains no members

  'Domain Admins' - All members from 'MONTFORD-POINT.navy.mil' forest

  'Enterprise Admins' - All members from 'MONTFORD-POINT.navy.mil' forest

  'Schema Admins' - All members from 'MONTFORD-POINT.navy.mil' forest

  'Group Policy Creator Owners' - All members from 'MONTFORD-POINT.navy.mil' forest


vuln_id: V-243497
rule_id: SV-243497r959010_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 8BB538EB3700014FC44B5F8DD11DFA7BC48109A0
  ~~~~~
  Only one site exists so this requirement is NA.

  Site: Default-First-Site-Name


vuln_id: V-243500
rule_id: SV-243500r959010_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 024E7C77D93E10021C4B7FF29988CA6DF95767DC
  ~~~~~
  Multiple domain controllers exist in the domain.

  Hostname:		MONT-DC-003.MONTFORD-POINT.navy.mil
  OperatingSystem:	Windows Server 2016 Standard
  IPv4Address:		164.231.187.34
  IPv6Address:		::1
  Forest:			MONTFORD-POINT.navy.mil
  Site:				Default-First-Site-Name
  IsGlobalCatalog:	True
  IsReadOnly:		False

  Hostname:		MONT-DC-004.MONTFORD-POINT.navy.mil
  OperatingSystem:	Windows Server 2016 Standard
  IPv4Address:		164.231.187.35
  IPv6Address:		
  Forest:			MONTFORD-POINT.navy.mil
  Site:				Default-First-Site-Name
  IsGlobalCatalog:	True
  IsReadOnly:		False


vuln_id: V-269097
rule_id: SV-269097r1026170_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryDomain_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 21368FE6539B8B519519A8F79490AF701CE1B0F5
  ~~~~~
  Kerberos Authentication Service:	No Auditing

  Kerberos Service Ticket Operations:	No Auditing


vuln_id: V-243502
rule_id: SV-243502r1026198_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryForest_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 909250FAC5A80BC1161A07D6B15B371F54411F1B
  ~~~~~
  =========================
  Name:				MONTFORD-POINT\SHB_Admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-500
  DistinguishedName:	CN=SHB_Admin,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:				MONTFORD-POINT\d.admin
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1104
  DistinguishedName:	CN=D.Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:				MONTFORD-POINT\montford.exchange
  objectClass:			user
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1118
  DistinguishedName:	CN=Exchange Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:				MONTFORD-POINT\MONTFORD-POINT LAN Management
  objectClass:			group
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1193
  DistinguishedName:	CN=MONTFORD-POINT LAN Management,OU=GROUPS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:				MONTFORD-POINT\MONTFORD-POINT Techs
  objectClass:			group
  objectSID:			S-1-5-21-1360995287-4027491577-3040029667-1194
  DistinguishedName:	CN=MONTFORD-POINT Techs,OU=GROUPS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil


vuln_id: V-243503
rule_id: SV-243503r1026201_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryForest_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 26BEA1DC84262B8BF520677BDD9DEEBFD409D6A3
  ~~~~~
  'dsHeuristics' is not configured.


vuln_id: V-243504
rule_id: SV-243504r1026204_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryForest_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 88A87293C2622EEB484E11DDD7762929A04734DC
  ~~~~~
  DomainRole:	Primary Domain Controller

  NtpClient (Local)
  Type:		NT5DS (Policy) [expected 'NTP']


vuln_id: V-243506
rule_id: SV-243506r1026208_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-ActiveDirectoryForest_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D7B79E8932C30F595C990EF4C4AE2F8DF34DF99C
  ~~~~~

  Schema Permissions:
    Permissions are set to the default for: Administrators - Replicating Directory Changes All
    Permissions are set to the default for: Administrators - Replicating Directory Changes In Filtered Set
    Permissions are set to the default for: Administrators - Manage replication topology
    Permissions are set to the default for: Administrators - Replicating Directory Changes
    Permissions are set to the default for: Administrators - Replication Synchronization
    Permissions are set to the default for: Enterprise Read-only Domain Controllers - Replicating Directory Changes In Filtered Set
    Permissions are set to the default for: Enterprise Read-only Domain Controllers - Replicating Directory Changes
    Permissions are set to the default for: Enterprise Read-only Domain Controllers - Replicating Directory Changes All
    Permissions are set to the default for: Schema Admins - Change schema master
    Permissions are set to the default for: Schema Admins - Special (except Full, Delete, and Delete subtree)
    Permissions are set to the default for: Authenticated Users - Read
    Permissions are set to the default for: Enterprise Domain Controllers - Manage replication topology
    Permissions are set to the default for: Enterprise Domain Controllers - Replicating Directory Changes All
    Permissions are set to the default for: Enterprise Domain Controllers - Replicating Directory Changes In Filtered Set
    Permissions are set to the default for: Enterprise Domain Controllers - Replicating Directory Changes
    Permissions are set to the default for: Enterprise Domain Controllers - Replication Synchronization
    Permissions are set to the default for: System - Full Control


vuln_id: V-223016
rule_id: SV-223016r879612_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\d.admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104
  ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6
  ~~~~~
  'Check for publisher's certificate revocation' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
  Value Name:	State
  Value:		0x00023c00 (146432)
  Type:		REG_DWORD


vuln_id: V-223122
rule_id: SV-223122r879587_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\d.admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104
  ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B
  ~~~~~
  'Disable AutoComplete for forms' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	Use FormSuggest
  Value:		no
  Type:		REG_SZ


vuln_id: V-223124
rule_id: SV-223124r879587_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\d.admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104
  ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE
  ~~~~~
  'Turn on the auto-complete feature for user names and passwords on forms' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	FormSuggest Passwords
  Value:		no
  Type:		REG_SZ

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	FormSuggest PW Ask
  Value:		no
  Type:		REG_SZ


vuln_id: V-224820
rule_id: SV-224820r1038967_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: F1A30B85277550AD2072CFAC46AEF4298B54F106
  ~~~~~
  Password for the built-in Administrator account (SHB_Admin) was last changed on 03/24/2021 16:46:13 (1674 days ago)


vuln_id: V-224831
rule_id: SV-224831r958472_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 970CB0CF367610B48D3175A7F6732146B363AA1D
  ~~~~~
  All disk file systems are NTFS or ReFS.

  Device ID:		C:
  Drive Type:		Local Disk (3)
  Volume Name:		DC-003-OS
  File System:		NTFS

  Device ID:		D:
  Drive Type:		Local Disk (3)
  Volume Name:		PROGLOGS
  File System:		NTFS

  Device ID:		E:
  Drive Type:		Local Disk (3)
  Volume Name:		AD-SYSVOL
  File System:		NTFS


vuln_id: V-224835
rule_id: SV-224835r958726_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4622FD254FF6A79BAE1AF05CB5EF2C19BE31CD4F
  ~~~~~
  HKLM:\SECURITY
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadPermissions, ChangePermissions
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------

  HKLM:\SOFTWARE
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Users
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: CREATOR OWNER
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------

  HKLM:\SYSTEM
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Server Operators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: CREATOR OWNER
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: InheritOnly

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\Authenticated Users
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------


vuln_id: V-224837
rule_id: SV-224837r958482_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 1C7B892F561A2193CB86D61FA0145F6304D2D90B
  ~~~~~
  Ignored Accounts:
  ---------------------
  Name:		SHB_Admin
  SID:			S-1-5-21-1360995287-4027491577-3040029667-500
  Enabled:		True
  Last Logon:	Never


  Failed accounts:
  ---------------------
  Name:		DOD_Admin
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1000
  Enabled:		True
  Last Logon:	06/24/2025 19:14:22 [120 days]

  Name:		HealthMailbox3295a98105294ef195ff4f5394ae0e3c
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1606
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailbox8d8eb4c107e64340876668cde6c1289e
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1607
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailboxfd82eb3f816c4428bcc7a1706f017682
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1608
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailbox4ffeb90d1e3e42808987669877a590dc
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1150
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailboxa7603ef65a894a7abd37cc7afcd0498f
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1609
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailbox0045b0edfe864ade8de6332392102884
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1151
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailbox2a4e029adc2c45d7a2377f21fc959267
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1610
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailboxff1c61cd50724325bd1467262f3ab3f7
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1611
  Enabled:		True
  Last Logon:	Never

  Name:		HealthMailbox476aa3607f714413bb95f561ccbef1c1
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1152
  Enabled:		True
  Last Logon:	Never

  Name:		MONT-EM-NAA
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1154
  Enabled:		True
  Last Logon:	Never

  Name:		MONT-EM-SVRCP
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1155
  Enabled:		True
  Last Logon:	Never

  Name:		MONT-EM-WKSCP
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1156
  Enabled:		True
  Last Logon:	Never

  Name:		Perl, Alexandra M., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1160
  Enabled:		True
  Last Logon:	02/03/2025 10:53:32 [262 days]

  Name:		Davis, Jason T., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1161
  Enabled:		True
  Last Logon:	01/28/2025 12:09:11 [268 days]

  Name:		Long, Michael D., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1165
  Enabled:		True
  Last Logon:	08/18/2025 11:14:26 [66 days]

  Name:		Arnold, Ryan W., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1172
  Enabled:		True
  Last Logon:	07/28/2025 00:23:29 [87 days]

  Name:		Corachan, Steven, CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1173
  Enabled:		True
  Last Logon:	06/28/2025 15:04:47 [117 days]

  Name:		user, test
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1230
  Enabled:		True
  Last Logon:	11/20/2024 15:06:00 [337 days]

  Name:		Spain, Lance C., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1232
  Enabled:		True
  Last Logon:	04/25/2025 09:45:30 [181 days]

  Name:		MSMEODUser
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1243
  Enabled:		True
  Last Logon:	Never

  Name:		User, Test C., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1245
  Enabled:		True
  Last Logon:	11/20/2024 15:17:52 [337 days]

  Name:		Wright, Hayden V., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1248
  Enabled:		True
  Last Logon:	06/09/2025 18:13:25 [135 days]

  Name:		Smith, Alexander D., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1249
  Enabled:		True
  Last Logon:	03/19/2025 13:41:00 [218 days]

  Name:		Jones, Thomas L., Admin
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1250
  Enabled:		True
  Last Logon:	Never

  Name:		Jones, Thomas
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1251
  Enabled:		True
  Last Logon:	Never

  Name:		Sanders, James R., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1253
  Enabled:		True
  Last Logon:	06/04/2025 14:16:14 [141 days]

  Name:		Muchuslky, Joey
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1254
  Enabled:		True
  Last Logon:	06/04/2025 14:15:29 [141 days]

  Name:		Monks, Paul J., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1255
  Enabled:		True
  Last Logon:	08/01/2025 19:55:03 [82 days]

  Name:		Hershock, Patricia
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1256
  Enabled:		True
  Last Logon:	06/20/2025 11:05:07 [125 days]

  Name:		Simon, Anthony E., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1260
  Enabled:		True
  Last Logon:	08/30/2025 12:53:38 [54 days]

  Name:		Smith, Josh A., CTR
  SID:			S-1-5-21-1360995287-4027491577-3040029667-1645
  Enabled:		True
  Last Logon:	Never


vuln_id: V-224839
rule_id: SV-224839r1038967_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 5FA70E953F12D3C0AF507422C3B9826225B21F81
  ~~~~~
  Failed accounts:
  ---------------------
  Name:			D.Admin
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1104
  Enabled:			True
  Password Expires:	False

  Name:			S.Admin
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1105
  Enabled:			True
  Password Expires:	False

  Name:			W.Admin
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1106
  Enabled:			True
  Password Expires:	False

  Name:			Exchange Admin
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1118
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox03020cb359cd4879a5fd73f010bde991
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1605
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox3295a98105294ef195ff4f5394ae0e3c
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1606
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox8d8eb4c107e64340876668cde6c1289e
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1607
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailboxfd82eb3f816c4428bcc7a1706f017682
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1608
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox4ffeb90d1e3e42808987669877a590dc
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1150
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailboxa7603ef65a894a7abd37cc7afcd0498f
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1609
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox0045b0edfe864ade8de6332392102884
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1151
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox2a4e029adc2c45d7a2377f21fc959267
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1610
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailboxff1c61cd50724325bd1467262f3ab3f7
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1611
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailbox476aa3607f714413bb95f561ccbef1c1
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1152
  Enabled:			True
  Password Expires:	False

  Name:			HealthMailboxa75cf849d12c447fb0c70e70b866e36e
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1612
  Enabled:			True
  Password Expires:	False

  Name:			Backup
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1614
  Enabled:			True
  Password Expires:	False

  Name:			Scan Admin
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1192
  Enabled:			True
  Password Expires:	False

  Name:			FIM, ANOC
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1203
  Enabled:			True
  Password Expires:	False

  Name:			IA ADMIN, JTBegarek
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1212
  Enabled:			True
  Password Expires:	False

  Name:			user, test
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1230
  Enabled:			True
  Password Expires:	False

  Name:			Gonzalez, Ian W., CTR
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1242
  Enabled:			True
  Password Expires:	False

  Name:			MSMEODUser
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1243
  Enabled:			True
  Password Expires:	False

  Name:			User, Test C., CTR
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1245
  Enabled:			True
  Password Expires:	False

  Name:			Jones, Thomas
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1251
  Enabled:			True
  Password Expires:	False

  Name:			Sanders, James R., CTR
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1253
  Enabled:			True
  Password Expires:	False

  Name:			Muchuslky, Joey
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1254
  Enabled:			True
  Password Expires:	False

  Name:			Begarek, Justin T., CIV
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1263
  Enabled:			True
  Password Expires:	False

  Name:			Smith, Josh A., CTR
  SID:				S-1-5-21-1360995287-4027491577-3040029667-1645
  Enabled:			True
  Password Expires:	False


vuln_id: V-224842
rule_id: SV-224842r991589_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 1E905A685F637BB40DE0CCC74A42DFE14AD3B097
  ~~~~~
  Certificate .p12 and/or .pfx files:
  ---------------------
  File:		MONT-DC-003.pfx
  Path:		C:\Temp
  Created:	06/13/2023 20:57:19


vuln_id: V-224845
rule_id: SV-224845r958478_rule
status: Not_Reviewed
comments: documentation
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: A5A792923F838BAD0506209E17CDD23EF6D8A091
  ~~~~~
  Installed Roles:
  ---------------------
  Active Directory Domain Services
  DHCP Server
  DNS Server
  File and Storage Services
  Network Policy and Access Services

  Installed Role Services:
  ---------------------
  File and iSCSI Services
  File Server
  Storage Services

  Installed Features:
  ---------------------
  .NET Framework 4.6 Features
  .NET Framework 4.6
  WCF Services
  TCP Port Sharing
  BitLocker Drive Encryption
  Enhanced Storage
  Group Policy Management
  Remote Server Administration Tools
  Feature Administration Tools
  BitLocker Drive Encryption Administration Utilities
  BitLocker Drive Encryption Tools
  BitLocker Recovery Password Viewer
  Role Administration Tools
  AD DS and AD LDS Tools
  Active Directory module for Windows PowerShell
  AD DS Tools
  Active Directory Administrative Center
  AD DS Snap-Ins and Command-Line Tools
  Active Directory Certificate Services Tools
  Certification Authority Management Tools
  DHCP Server Tools
  DNS Server Tools
  Network Policy and Access Services Tools
  Windows PowerShell
  Windows PowerShell 5.1
  Windows PowerShell ISE
  WoW64 Support


vuln_id: V-224848
rule_id: SV-224848r958364_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8E4118BA0172823EAFB877B2F7EC4FE513DE1531
  ~~~~~
  No enabled accounts found that are set to expire within 72 hours of the WhenCreated date.  If there are enabled 'temporary' accounts currently in this domain, this should be marked as Open.  Otherwise, mark as Not Applicable.


vuln_id: V-224849
rule_id: SV-224849r958508_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: C0319D09815FB8218DB96DF050BE89340801CCB6
  ~~~~~
  No enabled accounts found that are set to expire within 72 hours of the WhenCreated date.  If there are enabled 'emergency' accounts currently in this domain, this should be marked as Open.  Otherwise, mark as Not Applicable.


vuln_id: V-224862
rule_id: SV-224862r1038944_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 88A87293C2622EEB484E11DDD7762929A04734DC
  ~~~~~
  DomainRole:	Primary Domain Controller

  NtpClient (Local)
  Type:		NT5DS (Policy) [expected 'NTP']


vuln_id: V-224863
rule_id: SV-224863r991589_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 6C2D5BEB844806AC4BBE37CC47B70EAC29983551
  ~~~~~
  The following User Rights are assigned to orphaned SIDs:
  SeSecurityPrivilege:  S-1-5-21-1199390858-2101972093-2013113664-1129, S-1-5-21-270843172-1021756428-1876623829-2158


vuln_id: V-224940
rule_id: SV-224940r958478_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 98C5AA677C378D823FFF089EBE87265FA619F43F
  ~~~~~
  'Configure Windows SmartScreen' is NOT Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System\
  Value Name:	EnableSmartScreen
  Value:		0x00000000 (0) [Expected 1]
  Type:		REG_DWORD


vuln_id: V-224964
rule_id: SV-224964r958726_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: AECE488AF9D6FA206476E02B634ED70FCEA9659F
  ~~~~~
  The following are members of the local Administrators group:
  ---------------------
  Name:		MONTFORD-POINT\DOD_Admin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1000

  Name:		MONTFORD-POINT\Domain Admins
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-512

  Name:		MONTFORD-POINT\Enterprise Admins
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-519

  Name:		MONTFORD-POINT\MONT-EM-Admin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1157

  Name:		MONTFORD-POINT\Montford.backup
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1614

  Name:		MONTFORD-POINT\montford.exchange
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1118

  Name:		MONTFORD-POINT\SHB_Admin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-500

  Name:		MONTFORD-POINT\tagavrilovic.iaadmin
  objectClass:	User
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1231


vuln_id: V-224965
rule_id: SV-224965r958494_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DC0DD1172DDB62545189A23C183E1B9AAA6B3B45
  ~~~~~
  'Enforce user logon restrictions' is Enabled

  GPO Path:	Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Account Policies >> Kerberos Policy
  Value Name:	TicketValidateClient
  Value:		True


vuln_id: V-224966
rule_id: SV-224966r958494_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D520F2178328249628ED4ADAF1D900C51527D89C
  ~~~~~
  'Maximum lifetime for service ticket' is Configured

  GPO Path:	Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Account Policies >> Kerberos Policy
  Value Name:	MaxServiceAge
  Value:		600


vuln_id: V-224967
rule_id: SV-224967r958494_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 45DD0D563EE35E12DB6C8570E08C7D4C8036E0F7
  ~~~~~
  'Maximum lifetime for user ticket' is Configured

  GPO Path:	Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Account Policies >> Kerberos Policy
  Value Name:	MaxTicketAge
  Value:		10


vuln_id: V-224968
rule_id: SV-224968r958494_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F1A5AAD3C90C7844E8740DA2287C4BDAEADAE4E4
  ~~~~~
  'Maximum lifetime for user ticket renewal' is Configured

  GPO Path:	Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Account Policies >> Kerberos Policy
  Value Name:	MaxRenewAge
  Value:		7


vuln_id: V-224969
rule_id: SV-224969r958494_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D6FECCCB6DF2C36DE9FC8887E0D33696937057EF
  ~~~~~
  'Maximum tolerance for computer clock synchronization' is Configured

  GPO Path:	Computer Configuration >> Policies >> Windows Settings >> Security Settings >> Account Policies >> Kerberos Policy
  Value Name:	MaxClockSkew
  Value:		5


vuln_id: V-224970
rule_id: SV-224970r958726_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3892B0B5063C129F18466B33431EF51304032F8C
  ~~~~~
  There are 12 compliant files out of 12 total file(s) in 'E:\Logs'.

  There are 1 compliant files out of 1 total files in 'E:\Logs'.


vuln_id: V-224971
rule_id: SV-224971r958726_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  NT AUTHORITY\Authenticated Users:(RX)
  NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(GR,GE)
  BUILTIN\Server Operators:(RX)
  BUILTIN\Server Operators:(OI)(CI)(IO)(GR,GE)
  BUILTIN\Administrators:(RX,W,WDAC,WO)
  BUILTIN\Administrators:(OI)(CI)(IO)(WDAC,WO,GR,GW,GE)
  NT AUTHORITY\SYSTEM:(F)
  NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
  CREATOR OWNER:(OI)(CI)(IO)(WDAC,WO,GR,GW,GE)
  ---------------------


vuln_id: V-224972
rule_id: SV-224972r958726_rule
status: Not_Reviewed
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 0C64CE6EC5AA5EE43B5C88120001A05A00313856
  ~~~~~
  GPO Name:	AR21 - Edge FIX FEB2022
  GPO GUID:	003a4b00-8a6c-4430-82c7-eb242f312734
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Internet Explorer 11 V1R19 - User
  GPO GUID:	009ff87d-d932-441b-a2f6-3ba585dc8949
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	Domain User Pol Adds 04-22
  GPO GUID:	0ab94efd-80cb-4182-8be0-4d5c77808fad
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Microsoft Edge v1r1 Computer
  GPO GUID:	0df1b468-68c7-4e60-bd66-971fbbabb95a
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	DotNet4 Fix 04-22
  GPO GUID:	114ae059-841b-429a-aa8a-cea9346c4aa4
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - BitLocker Backup to Active Directory
  GPO GUID:	13cf8084-13ec-427b-9cab-f3243723b027
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	V-236000 Preview pane 02-22
  GPO GUID:	18de13be-ce1c-4e53-9612-e440386ed806
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Outlook V2R1 User
  GPO GUID:	1adacc11-67f9-42e9-be04-f32b3799dcc6
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	Firefox 04-22
  GPO GUID:	202579c9-9c90-480b-a706-cd206212448b
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Server Event Log Backup
  GPO GUID:	211d022b-3225-4167-99e4-0c48f09f6567
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Adobe Reader DC Continuous V1R2 User
  GPO GUID:	2401b4fb-1b36-42a9-84c3-4340dc2e7502
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - PowerPoint V1R1 User
  GPO GUID:	27a66feb-16c8-4d31-85c6-38bd47c8fd20
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	Server Event Logs 
  GPO GUID:	2e1d00fc-0115-4b8b-8c28-f17f7cc47ed4
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	Default Domain Policy
  GPO GUID:	31b2f340-016d-11d2-945f-00c04fb984f9
  ---------------------
  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoCustom
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoCustom
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Windows 10 FIX FEB2022
  GPO GUID:	330cdbf2-c03b-4b9c-b9ec-b6b872dde8db
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Disable Sleep/Hibernate
  GPO GUID:	35d3d931-a7dc-4b8b-9be0-a67cfbd6268d
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Adobe Add-In Removal
  GPO GUID:	3a0de786-3214-4547-b689-920a1783dd34
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Support Users Drive Mapping
  GPO GUID:	3c0b7467-8063-47b4-844e-2b1db72234f6
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Internet Explorer 11 V1R19 - Computer
  GPO GUID:	3c3c67e4-a139-4561-af7b-d5ac7cae2ad1
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Google Chrome FIX FEB2022
  GPO GUID:	4077a504-b830-4b59-868a-35847b93e9c6
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR 2.1 - LAPS Configuration Policy
  GPO GUID:	446e9640-684e-4528-a16f-a72f31b95b67
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Google Chrome V2R1 - Computer
  GPO GUID:	466a3169-b8b0-4e46-bc61-6ca031284f5e
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	V-2244896 V-224897 Audits 02-22
  GPO GUID:	5101821e-891e-495e-ad1b-05150a0fb41c
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Mozilla Firefox FIX FEB2022
  GPO GUID:	5464ea36-f45c-4be0-89e6-a0043741fa96
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	Map CAC
  GPO GUID:	54f949d4-864c-40fc-9756-59a367edaf66
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Disable print spooler inbound
  GPO GUID:	57995639-3cc1-481e-871d-b60d68b54f2a
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - OneNote and OneDrive STIGs
  GPO GUID:	57db8f1d-cf8e-45dd-afb2-4747c1fa02e8
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Add Server Admins to Local Administrators
  GPO GUID:	59e937c0-585e-4d7a-b2bc-17f943583d35
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Office System V1R1 Computer
  GPO GUID:	5ad817c7-2bbb-40fa-b6ce-ad8ac845a998
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	User Pol 4 Exchange 5-22
  GPO GUID:	5ce6ea3f-55a6-49f0-bf68-18a8bcc32bfb
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Windows 10 v2r1 Computer
  GPO GUID:	633bf66a-4f82-4562-a78f-eefa83686f95
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	Default Domain Controllers Policy
  GPO GUID:	6ac1786c-016f-11d2-945f-00c04fb984f9
  ---------------------
  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoCustom
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoCustom
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Axway Enterprise Configuration
  GPO GUID:	6c45f92c-56f0-46e4-a921-2ffbdc92a92a
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Windows 10 v2r1 User
  GPO GUID:	6f85b0d1-36d3-491e-91c4-c6ba3cef6d91
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Adobe Disable FIPS
  GPO GUID:	6faf5e3a-caf7-4ac5-a9b3-201db0ca8011
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Adobe Reader DC Continuous protected view MAR2022
  GPO GUID:	73fb4c08-5e4e-4613-9c92-a1935473c0b8
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Word V1R1 User
  GPO GUID:	795e8ed2-6ce5-4658-a2c3-d52595e7c6e3
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Office System V1R1 User
  GPO GUID:	7cf27d8d-3025-453a-a598-1c52df19feba
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Adobe Reader DC Continuous V1R2 Computer
  GPO GUID:	80340fc8-26a3-4c92-a327-dea83f1ed6d6
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Windows Server 2016 V2R1 - DC - Computer
  GPO GUID:	816b5f36-4efa-4a32-82c0-a88cf0cecbf3
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - RBAC
  GPO GUID:	88602f3d-3a9f-4447-934a-2dde7e6ac06d
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Axway Configuration
  GPO GUID:	9a2e7ffb-86b0-4c62-bfc8-6e7ac786a1ed
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	V-224921 Hardened UNC 02-22
  GPO GUID:	9f2930fd-254e-4f1b-ae4d-722bb9f35b41
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	DoD Adobe Acrobat Pro DC Continuous STIG Computer V1R2
  GPO GUID:	a1c7ddff-5f74-49b9-9ac2-f92d1735189a
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : ENTERPRISE DOMAIN CONTROLLERS
  TrusteeType : WellKnownGroup
  Permission  : GpoRead
  Inherited   : False

  Trustee     : SYSTEM
  TrusteeType : WellKnownGroup
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False
  ---------------------


  GPO Name:	AR21 - Drive Mapping
  GPO GUID:	a5fcab78-2b37-4b84-8487-bcd275a129a6
  ---------------------
  Trustee     : Authenticated Users
  TrusteeType : WellKnownGroup
  Permission  : GpoApply
  Inherited   : False

  Trustee     : Domain Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModifySecurity
  Inherited   : False

  Trustee     : Enterprise Admins
  TrusteeType : Group
  Permission  : GpoEditDeleteModify

  ---truncated results. met character limit---


vuln_id: V-224973
rule_id: SV-224973r958726_rule
status: Not_Reviewed
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 4D85055B89AC35AB27B6E3B6664B1897035F6EC4
  ~~~~~
  OU Name	: Domain Controllers
  OU DN	: OU=Domain Controllers,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\NETWORK SERVICE
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty, ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SYSTEM
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow
  ---------------------


vuln_id: V-224974
rule_id: SV-224974r958726_rule
status: Not_Reviewed
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: D7A161EFD64DBDC717E086EA4DB84B3724C238CF
  ~~~~~
  OU Name	: ASHORE SUPPORT
  OU DN	: OU=ASHORE SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Account Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Print Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : Everyone
  ActiveDirectoryRights : DeleteChild, DeleteTree, Delete
  AccessControlType     : Deny

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\NETWORK SERVICE
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty, ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SYSTEM
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow
  ---------------------


  OU Name	: GROUPS
  OU DN	: OU=GROUPS,OU=ASHORE SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Account Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Print Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : Everyone
  ActiveDirectoryRights : DeleteTree, Delete
  AccessControlType     : Deny

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\NETWORK SERVICE
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty, ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SYSTEM
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow
  ---------------------


  OU Name	: USERS
  OU DN	: OU=USERS,OU=ASHORE SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Account Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Print Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : Everyone
  ActiveDirectoryRights : DeleteTree, Delete
  AccessControlType     : Deny

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\NETWORK SERVICE
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty, ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SYSTEM
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow
  ---------------------


  OU Name	: Disabled_Accounts
  OU DN	: OU=Disabled_Accounts,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Account Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Print Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : Everyone
  ActiveDirectoryRights : DeleteTree, Delete
  AccessControlType     : Deny

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\NETWORK SERVICE
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty, ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SYSTEM
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow
  ---------------------


  OU Name	: GALSYNC
  OU DN	: OU=GALSYNC,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Account Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Print Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : Everyone
  ActiveDirectoryRights : DeleteTree, Delete
  AccessControlType     : Deny

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\Authenticated Users
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\NETWORK SERVICE
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SELF
  ActiveDirectoryRights : ReadProperty, WriteProperty, ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : NT AUTHORITY\SYSTEM
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow
  ---------------------


  OU Name	: MEMBER SERVERS
  OU DN	: OU=MEMBER SERVERS,DC=MONTFORD-POINT,DC=navy,DC=mil
  ---------------------
  IdentityReference     : BUILTIN\Account Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : CreateChild, Self, WriteProperty, ExtendedRight, Delete, GenericRead, WriteDacl, WriteOwner
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ListChildren
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Pre-Windows 2000 Compatible Access
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : BUILTIN\Print Operators
  ActiveDirectoryRights : CreateChild, DeleteChild
  AccessControlType     : Allow

  IdentityReference     : CREATOR OWNER
  ActiveDirectoryRights : Self
  AccessControlType     : Allow

  IdentityReference     : Everyone
  ActiveDirectoryRights : DeleteTree, Delete
  AccessControlType     : Deny

  IdentityReference     : MONTFORD-POINT\Delegated Setup
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Domain Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Admins
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Enterprise Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : ReadProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Servers
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : CreateChild, DeleteChild, ListChildren, ReadProperty, WriteProperty, ListObject
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Trusted Subsystem
  ActiveDirectoryRights : GenericAll
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : CreateChild
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : DeleteTree
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : ExtendedRight
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Exchange Windows Permissions
  ActiveDirectoryRights : Delete, WriteDacl
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Key Admins
  ActiveDirectoryRights : ReadProperty, WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : WriteProperty
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericRead
  AccessControlType     : Allow

  IdentityReference     : MONTFORD-POINT\Organization Management
  ActiveDirectoryRights : GenericAll
  AccessControlType     

  ---truncated results. met character limit---


vuln_id: V-224975
rule_id: SV-224975r958524_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 38220628467C34D44A83106502D1AB33FFC4BF3D
  ~~~~~
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\NTDS\Parameters
  Registry Value:	E:\Database\ntds.dit

  Only system-created shares exist on this system.


vuln_id: V-224976
rule_id: SV-224976r958478_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: E0BDF45798C79C9D7292EC79FDB5523BD31F5459
  ~~~~~
  Non-compliant roles installed:
  ---------------------
  DHCP Server
  Network Policy and Access Services

  Compliant roles installed:
  ---------------------
  Active Directory Domain Services
  DNS Server
  File and Storage Services

  Installed software:
  ---------------------
  ActivID ActivClient x64
  Axway Desktop Validator
  CRLAutoCache
  DoD Secure Host Baseline Server
  InstallRoot
  Microsoft NetBanner
  Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
  Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005
  Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130
  Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33130
  Trellix Agent
  Trellix Data Loss Prevention - Endpoint
  Trellix Endpoint Security Firewall
  Trellix Endpoint Security Platform
  Trellix Endpoint Security Threat Prevention
  Trellix Policy Auditor Agent
  Trellix Solidifier
  Veritas Backup Exec Remote Agent for Windows
  Windows Resource Kit Tools
  WinZip 27.0


vuln_id: V-224979
rule_id: SV-224979r970703_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: C790E842E0293FA6B6AD6477F74365B9E2600758
  ~~~~~
  The setting 'MaxConnIdleTime' is NOT Configured
  Value: 900 [Expected: 300]


vuln_id: V-224980
rule_id: SV-224980r958732_rule
status: Not_Reviewed
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8D32877A8D5F1013203836ACB5293727D0EF11E5
  ~~~~~
  GPO Name:	AR21 - Edge FIX FEB2022
  GPO GUID:	003a4b00-8a6c-4430-82c7-eb242f312734
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Internet Explorer 11 V1R19 - User
  GPO GUID:	009ff87d-d932-441b-a2f6-3ba585dc8949
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Domain User Pol Adds 04-22
  GPO GUID:	0ab94efd-80cb-4182-8be0-4d5c77808fad
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Edge v1r1 Computer
  GPO GUID:	0df1b468-68c7-4e60-bd66-971fbbabb95a
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	DotNet4 Fix 04-22
  GPO GUID:	114ae059-841b-429a-aa8a-cea9346c4aa4
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - BitLocker Backup to Active Directory
  GPO GUID:	13cf8084-13ec-427b-9cab-f3243723b027
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	V-236000 Preview pane 02-22
  GPO GUID:	18de13be-ce1c-4e53-9612-e440386ed806
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Outlook V2R1 User
  GPO GUID:	1adacc11-67f9-42e9-be04-f32b3799dcc6
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Firefox 04-22
  GPO GUID:	202579c9-9c90-480b-a706-cd206212448b
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Server Event Log Backup
  GPO GUID:	211d022b-3225-4167-99e4-0c48f09f6567
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Adobe Reader DC Continuous V1R2 User
  GPO GUID:	2401b4fb-1b36-42a9-84c3-4340dc2e7502
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - PowerPoint V1R1 User
  GPO GUID:	27a66feb-16c8-4d31-85c6-38bd47c8fd20
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Server Event Logs 
  GPO GUID:	2e1d00fc-0115-4b8b-8c28-f17f7cc47ed4
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Default Domain Policy
  GPO GUID:	31b2f340-016d-11d2-945f-00c04fb984f9
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows 10 FIX FEB2022
  GPO GUID:	330cdbf2-c03b-4b9c-b9ec-b6b872dde8db
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Disable Sleep/Hibernate
  GPO GUID:	35d3d931-a7dc-4b8b-9be0-a67cfbd6268d
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Adobe Add-In Removal
  GPO GUID:	3a0de786-3214-4547-b689-920a1783dd34
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Support Users Drive Mapping
  GPO GUID:	3c0b7467-8063-47b4-844e-2b1db72234f6
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Internet Explorer 11 V1R19 - Computer
  GPO GUID:	3c3c67e4-a139-4561-af7b-d5ac7cae2ad1
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Google Chrome FIX FEB2022
  GPO GUID:	4077a504-b830-4b59-868a-35847b93e9c6
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR 2.1 - LAPS Configuration Policy
  GPO GUID:	446e9640-684e-4528-a16f-a72f31b95b67
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Google Chrome V2R1 - Computer
  GPO GUID:	466a3169-b8b0-4e46-bc61-6ca031284f5e
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	V-2244896 V-224897 Audits 02-22
  GPO GUID:	5101821e-891e-495e-ad1b-05150a0fb41c
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Mozilla Firefox FIX FEB2022
  GPO GUID:	5464ea36-f45c-4be0-89e6-a0043741fa96
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Map CAC
  GPO GUID:	54f949d4-864c-40fc-9756-59a367edaf66
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Disable print spooler inbound
  GPO GUID:	57995639-3cc1-481e-871d-b60d68b54f2a
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - OneNote and OneDrive STIGs
  GPO GUID:	57db8f1d-cf8e-45dd-afb2-4747c1fa02e8
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Add Server Admins to Local Administrators
  GPO GUID:	59e937c0-585e-4d7a-b2bc-17f943583d35
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Office System V1R1 Computer
  GPO GUID:	5ad817c7-2bbb-40fa-b6ce-ad8ac845a998
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	User Pol 4 Exchange 5-22
  GPO GUID:	5ce6ea3f-55a6-49f0-bf68-18a8bcc32bfb
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows 10 v2r1 Computer
  GPO GUID:	633bf66a-4f82-4562-a78f-eefa83686f95
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Default Domain Controllers Policy
  GPO GUID:	6ac1786c-016f-11d2-945f-00c04fb984f9
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Axway Enterprise Configuration
  GPO GUID:	6c45f92c-56f0-46e4-a921-2ffbdc92a92a
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows 10 v2r1 User
  GPO GUID:	6f85b0d1-36d3-491e-91c4-c6ba3cef6d91
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Adobe Disable FIPS
  GPO GUID:	6faf5e3a-caf7-4ac5-a9b3-201db0ca8011
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Adobe Reader DC Continuous protected view MAR2022
  GPO GUID:	73fb4c08-5e4e-4613-9c92-a1935473c0b8
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Word V1R1 User
  GPO GUID:	795e8ed2-6ce5-4658-a2c3-d52595e7c6e3
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Office System V1R1 User
  GPO GUID:	7cf27d8d-3025-453a-a598-1c52df19feba
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Adobe Reader DC Continuous V1R2 Computer
  GPO GUID:	80340fc8-26a3-4c92-a327-dea83f1ed6d6
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows Server 2016 V2R1 - DC - Computer
  GPO GUID:	816b5f36-4efa-4a32-82c0-a88cf0cecbf3
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - RBAC
  GPO GUID:	88602f3d-3a9f-4447-934a-2dde7e6ac06d
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Axway Configuration
  GPO GUID:	9a2e7ffb-86b0-4c62-bfc8-6e7ac786a1ed
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	V-224921 Hardened UNC 02-22
  GPO GUID:	9f2930fd-254e-4f1b-ae4d-722bb9f35b41
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	DoD Adobe Acrobat Pro DC Continuous STIG Computer V1R2
  GPO GUID:	a1c7ddff-5f74-49b9-9ac2-f92d1735189a
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Drive Mapping
  GPO GUID:	a5fcab78-2b37-4b84-8487-bcd275a129a6
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	DoD Adobe Acrobat Pro DC Continuous STIG User V1R2
  GPO GUID:	a97a2258-64f7-43c8-a1f4-cfaa5eea748a
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Workstation Admins - Add Local
  GPO GUID:	a9ec0f9b-d4f9-46ec-921d-9172267d8c09
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Deny log in FIX MAR2022
  GPO GUID:	a9f4d156-1c9e-42d0-8e7b-78b559953f05
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Outlook 2016 FIX FEB2022
  GPO GUID:	b89f8bf2-9285-408f-9827-30714a8bf255
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows 10 V1R22 - Users
  GPO GUID:	bc42462a-8dc6-4693-b2eb-bd7152273354
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR2.1-Disable SmartScreen GPO CRQ#200000
  GPO GUID:	bdcf3db0-ed6b-4cfd-a3de-a0ee39cff553
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows Server 2016 V2R1 - MS - User
  GPO GUID:	c09f48fa-c03a-4fb2-b5bc-bda9e3d15eba
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Time Service 5-22
  GPO GUID:	c692edd4-18d1-4698-afe9-226c60ef20d2
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - KDC Smart Card Fix CRQ195530
  GPO GUID:	c7c1449f-8ad7-4901-967d-fe3d50593ca1
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Event Logs 5-22
  GPO GUID:	ccbb3d99-e1c0-472c-a67a-61d8470c1d01
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Firefox 4-22A
  GPO GUID:	d67e0f1c-6313-4a2e-bfaf-35bf893763ac
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Member Server Admins - Add Local
  GPO GUID:	d8bbfb6f-ae1c-4cac-acbc-098d77e707c8
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows Server 2016 V2R2 - MS - Computer
  GPO GUID:	e3110a28-cdd2-4091-b703-e3947ffe804f
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - PDC Timeservers 5-22
  GPO GUID:	e3cfb6e6-c5f0-4eae-9dc7-8d02431cf0ed
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows 10 V1R22 - Computer
  GPO GUID:	e430bd69-f153-4db6-b566-ddfab9967afd
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Windows Server 2016 V2R1 - DC - User
  GPO GUID:	ef7dc0bc-3268-41c3-9181-f6c56fd27f6a
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	AR21 - Microsoft Office 2016 - Excel V1R2 User
  GPO GUID:	f17fdb9c-2ad0-47f0-a5eb-6693e16651a5
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	IE11 STIG V2R1 4-22
  GPO GUID:	ff4cf530-57bd-4651-8020-451cf511bf99
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


  GPO Name:	Exchange usr rights 5-22
  GPO GUID:	ffa4f8e2-fa9a-4162-99c7-1439aae19de0
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl
  IsInherited           : True
  InheritanceType       : All
  ---------------------


vuln_id: V-224981
rule_id: SV-224981r958732_rule
status: Open
comments: No failure audit settings
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 19746D1E477B8F7DA30F943E64E42D2E57BA187F
  ~~~~~
  Object Name:	MONTFORD-POINT
  Object DN:	DC=MONTFORD-POINT,DC=navy,DC=mil
  Object Class:	domainDNS
  ---------------------
  AuditFlags            : Success
  IdentityReference     : BUILTIN\Administrators
  ActiveDirectoryRights : ExtendedRight
  IsInherited           : False
  InheritanceType       : None

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : False
  InheritanceType       : All

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl, WriteOwner
  IsInherited           : False
  InheritanceType       : None

  AuditFlags            : Success
  IdentityReference     : MONTFORD-POINT\Domain Users
  ActiveDirectoryRights : ExtendedRight
  IsInherited           : False
  InheritanceType       : None
  ---------------------


vuln_id: V-224982
rule_id: SV-224982r958732_rule
status: Open
comments: No failure audit settings
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 910E0557232C81D7B2E612D54715A1B79B1AC045
  ~~~~~
  Object Name:	Infrastructure
  Object DN:	CN=Infrastructure,DC=MONTFORD-POINT,DC=navy,DC=mil
  Object Class:	infrastructureUpdate
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, ExtendedRight
  IsInherited           : False
  InheritanceType       : None
  ---------------------


vuln_id: V-224983
rule_id: SV-224983r958732_rule
status: Open
comments: No failure audit settings
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: A9A635A5963F6C60BDED8092F28CCE6E36D2C153
  ~~~~~
  Object Name:	Domain Controllers
  Object DN:	OU=Domain Controllers,DC=MONTFORD-POINT,DC=navy,DC=mil
  Object Class:	organizationalUnit
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : All

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : CreateChild, DeleteChild, DeleteTree, Delete, WriteDacl, WriteOwner
  IsInherited           : False
  InheritanceType       : None
  ---------------------


vuln_id: V-224984
rule_id: SV-224984r958732_rule
status: Open
comments: No failure audit settings
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 85D03424A16D29FC0BFB271FD90C04F70F183AD8
  ~~~~~
  Object Name:	AdminSDHolder
  Object DN:	CN=AdminSDHolder,CN=System,DC=MONTFORD-POINT,DC=navy,DC=mil
  Object Class:	container
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, WriteDacl, WriteOwner
  IsInherited           : False
  InheritanceType       : None
  ---------------------


vuln_id: V-224985
rule_id: SV-224985r958732_rule
status: Open
comments: No failure audit settings
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 6F9F8BF32EFEA4B816B61252C0673C259CD504E9
  ~~~~~
  Object Name:	RID Manager$
  Object DN:	CN=RID Manager$,CN=System,DC=MONTFORD-POINT,DC=navy,DC=mil
  Object Class:	rIDManager
  ---------------------
  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty
  IsInherited           : True
  InheritanceType       : Descendents

  AuditFlags            : Success
  IdentityReference     : Everyone
  ActiveDirectoryRights : WriteProperty, ExtendedRight
  IsInherited           : False
  InheritanceType       : None
  ---------------------


vuln_id: V-224986
rule_id: SV-224986r958368_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 487FF87B531F4E9922E9FE848EB2A4160CECFDD1
  ~~~~~
  Computer Account Management:	Success


vuln_id: V-224987
rule_id: SV-224987r958732_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9725973125A3C25628DD865C4D342CFE535BB8C1
  ~~~~~
  Directory Service Access:	Success and Failure


vuln_id: V-224989
rule_id: SV-224989r958732_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8B318287B116BD5C0FC915358050BCD94D36E770
  ~~~~~
  Directory Service Changes:	Success and Failure


vuln_id: V-224991
rule_id: SV-224991r958448_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8386EA2E5A2C0D012755A6C9F7B6F39D61D29F2F
  ~~~~~
  Certificates found at 'Cert:\LocalMachine\My'


  FriendlyName : MONT-DC-003.MONTFORD-POINT.navy.mil
  IssuerName   : System.Security.Cryptography.X509Certificates.X500DistinguishedName
  Subject      : CN=MONT-DC-003.MONTFORD-POINT.navy.mil, OU=USN, OU=PKI, OU=DoD, O=U.S. Government, C=US


vuln_id: V-224992
rule_id: SV-224992r958448_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7115114BC716F19307736882EE1C307D4B1D4754
  ~~~~~

  Compliant Certificates:
  ---------------------------
  Subject:			CN=MONT-DC-003.MONTFORD-POINT.navy.mil, OU=USN, OU=PKI, OU=DoD, O=U.S. Government, C=US
  CertStore:			LocalMachine\My
  Issuer:			CN=DOD SW CA-67, OU=PKI, OU=DoD, O=U.S. Government, C=US
  FriendlyName:		MONT-DC-003.MONTFORD-POINT.navy.mil
  NotAfter:			06/08/2026 17:58:05
  Thumbprint:		09D2721B5061A5BD0B8E3C771D94CCF915BA291C
  KDCAuthKey:		KDC Authentication (1.3.6.1.5.2.3.5)
  ApprovedChain:	True
  CertificationPath...
  (0) - DoD Root CA 3
  (1) - DOD SW CA-67
  (2) - MONT-DC-003.MONTFORD-POINT.navy.mil


vuln_id: V-224993
rule_id: SV-224993r958448_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 3D3B4BF9D172F1653F4CA64457844979FAECE364
  ~~~~~
  Trusted Suffix:			MONTFORD-POINT.navy.mil
  DC Cert Subject:		CN=MONT-DC-003.MONTFORD-POINT.navy.mil, OU=USN, OU=PKI, OU=DoD, O=U.S. Government, C=US
  DC Cert Issuer:			CN=DOD SW CA-67, OU=PKI, OU=DoD, O=U.S. Government, C=US
  DC Cert Thumbprint:	09D2721B5061A5BD0B8E3C771D94CCF915BA291C

  Trusted Suffix:			mil
  DC Cert Subject:		Well Known UPN suffix
  DC Cert Issuer:			Well Known UPN suffix
  DC Cert Thumbprint:	Well Known UPN suffix

  There are 7 account findings:
  -------------------------------------
  Name:	SHB_Admin
  Enabled:	True
  UPN:	
  DN:		CN=SHB_Admin,CN=Users,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:	S.Admin
  Enabled:	True
  UPN:	
  DN:		CN=S.Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:	N.Admin
  Enabled:	True
  UPN:	
  DN:		CN=N.Admin,OU=USERS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:	MONT-EM-NAA
  Enabled:	True
  UPN:	
  DN:		CN=MONT-EM-NAA,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:	MONT-EM-SVRCP
  Enabled:	True
  UPN:	
  DN:		CN=MONT-EM-SVRCP,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:	MONT-EM-WKSCP
  Enabled:	True
  UPN:	
  DN:		CN=MONT-EM-WKSCP,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil

  Name:	MONT-EM-Admin
  Enabled:	True
  UPN:	
  DN:		CN=MONT-EM-Admin,OU=SERVICE ACCOUNTS,OU=MONTFORD-POINT SUPPORT,DC=MONTFORD-POINT,DC=navy,DC=mil


vuln_id: V-224994
rule_id: SV-224994r958484_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8321877B1939868783133E67C0DB12AC4A135F79
  ~~~~~
  The following accounts are enabled without requiring a smart card.
  Account Name:		SHB_Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		DOD_Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		D.Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		S.Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		W.Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		N.Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Exchange Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox03020cb359cd4879a5fd73f010bde991
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox3295a98105294ef195ff4f5394ae0e3c
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox8d8eb4c107e64340876668cde6c1289e
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailboxfd82eb3f816c4428bcc7a1706f017682
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox4ffeb90d1e3e42808987669877a590dc
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailboxa7603ef65a894a7abd37cc7afcd0498f
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox0045b0edfe864ade8de6332392102884
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox2a4e029adc2c45d7a2377f21fc959267
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailboxff1c61cd50724325bd1467262f3ab3f7
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailbox476aa3607f714413bb95f561ccbef1c1
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		HealthMailboxa75cf849d12c447fb0c70e70b866e36e
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		MONT-EM-NAA
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		MONT-EM-SVRCP
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		MONT-EM-WKSCP
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		MONT-EM-Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Backup
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Walton, Nicole E., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Scan Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		FIM, ANOC
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		IA ADMIN, JTBegarek
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		user, test
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Gonzalez, Ian W., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		MSMEODUser
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		User, Test C., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Smith, Alexander D., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Jones, Thomas L., Admin
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Jones, Thomas
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Green, Fred D., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Sanders, James R., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Muchuslky, Joey
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Simon, Anthony E., CTR
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Begarek, Justin T., CIV
  Account Enabled:		True
  Smart card Required:	False

  Account Name:		Smith, Josh A., CTR
  Account Enabled:		True
  Smart card Required:	False


vuln_id: V-224995
rule_id: SV-224995r958908_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: F7AD9B106F09B1E5992AFB251D89A3E532494619
  ~~~~~
  'Domain controller: LDAP server signing requirements' is NOT Require signing

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\NTDS\Parameters\
  Value Name:	LDAPServerIntegrity
  Value:		0x00000001 (1) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-224996
rule_id: SV-224996r991589_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9FE3732F0EFFFE6240DFD23D6396F5FA0FADC80C
  ~~~~~
  'Domain controller: Refuse machine account password changes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\
  Value Name:	RefusePasswordChange
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-224997
rule_id: SV-224997r958472_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: E5B8DE6F5B9AB5EF925507653B31D7770DEA4089
  ~~~~~
  SeNetworkLogonRight:

  BUILTIN\Administrators
  BUILTIN\Pre-Windows 2000 Compatible Access
  Everyone
  NT AUTHORITY\Authenticated Users
  NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS


vuln_id: V-224998
rule_id: SV-224998r958726_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 3306581CC2A5040D88182FF80C3D4D63A9960E69
  ~~~~~
  SeMachineAccountPrivilege:

  BUILTIN\Administrators
  NT AUTHORITY\Authenticated Users


vuln_id: V-224999
rule_id: SV-224999r958472_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1858769144B79710BECCDD1B260E058E76B738E9
  ~~~~~
  Allow log on through Remote Desktop Services:

  BUILTIN\Administrators


vuln_id: V-225000
rule_id: SV-225000r958472_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8968392459B797835F9CDB0E84E61A2D858F67D2
  ~~~~~
  Deny access to this computer from the network:

  BUILTIN\Guests


vuln_id: V-225001
rule_id: SV-225001r958472_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E719DE9AE81DFE3B722F6884328A5AF9192E5A68
  ~~~~~
  Deny log on as a batch job:

  BUILTIN\Guests


vuln_id: V-225002
rule_id: SV-225002r958472_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 853C0CE81C1C24F05FBE2ADC24FBC18BB9DC2A41
  ~~~~~
  Deny log on as a service:

  No objects assigned to this right.


vuln_id: V-225003
rule_id: SV-225003r958472_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D42DF0ECC417CB415089564874B6907BEB79128C
  ~~~~~
  Deny log on locally:

  BUILTIN\Guests


vuln_id: V-225004
rule_id: SV-225004r958672_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9710F86B1963CAAA2C9429B687B5B8F0CFCE9509
  ~~~~~
  Deny log on through Remote Desktop Services:

  BUILTIN\Guests


vuln_id: V-225005
rule_id: SV-225005r958726_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2C86C8ECDE6B5E7D84AFECB650DBB5A26158126B
  ~~~~~
  Enable computer and user accounts to be trusted for delegation:

  BUILTIN\Administrators


vuln_id: V-225006
rule_id: SV-225006r991589_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A1B26E1C537A3E85A12A28DA9FDE737C46F6408D
  ~~~~~
  Name:			krbtgt
  SID:				S-1-5-21-1360995287-4027491577-3040029667-502
  PasswordLastSet:	10/16/2025 18:22:14 (6 days)


vuln_id: V-225007
rule_id: SV-225007r958726_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: C0F3904C423975C11B19B4BFBF943881A50CAA13
  ~~~~~
  System is a 'Primary Domain Controller' so this requirement is NA.


vuln_id: V-225069
rule_id: SV-225069r991589_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\d.admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104
  ResultHash: E1E8733E0EB898F9D2EF428AC96620439C92F3E6
  ~~~~~
  'Do not preserve zone information in file attachments' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
  Value Name:	SaveZoneInformation (Not found)


vuln_id: V-225072
rule_id: SV-225072r958472_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: D200BCD671BA155A1AD2AADCC3F00DA00CCEC9A4
  ~~~~~
  Allow log on locally:

  BUILTIN\Account Operators
  BUILTIN\Administrators
  BUILTIN\Backup Operators
  BUILTIN\Print Operators
  BUILTIN\Server Operators
  NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS


vuln_id: V-225073
rule_id: SV-225073r958726_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 66B9CC04EDA273C9465066EEB8F5B51DCB20665F
  ~~~~~
  Back up files and directories:

  BUILTIN\Administrators
  BUILTIN\Backup Operators
  BUILTIN\Server Operators


vuln_id: V-225080
rule_id: SV-225080r958726_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 150B29A1ABAE9F69632BC9C91BD3932B9BA7386E
  ~~~~~
  Force shutdown from a remote system:

  BUILTIN\Administrators
  BUILTIN\Server Operators


vuln_id: V-225084
rule_id: SV-225084r958726_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 35ACECBB96E5CA1C13A0ACC365FA8728B3EFA5D1
  ~~~~~
  Load and unload device drivers:

  BUILTIN\Administrators
  BUILTIN\Print Operators


vuln_id: V-225086
rule_id: SV-225086r958434_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 69373A71D638B53717ED5715BFFAE3EDDB82633A
  ~~~~~
  Manage auditing and security log:

  BUILTIN\Administrators
  Exchange Servers
  S-1-5-21-1199390858-2101972093-2013113664-1129
  S-1-5-21-270843172-1021756428-1876623829-2158


vuln_id: V-225092
rule_id: SV-225092r958726_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 8615B5BE092ADB083D1714DF2DE2B96AF77C0968
  ~~~~~
  Restore files and directories:

  BUILTIN\Administrators
  BUILTIN\Backup Operators
  BUILTIN\Server Operators


vuln_id: V-236000
rule_id: SV-236000r958478_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\d.admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1104
  ResultHash: 77C995428C2623C12745CA5F3EB37B8F7B8DEC30
  ~~~~~
  'Turn off Preview Pane' is Enabled
  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoPreviewPane
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  'Turn on or off details pane' is Enabled: (Always hide)
  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoReadingPane
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-271430
rule_id: SV-271430r1059573_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 6BC616B0CF84131BFB017A9DC62E207CE8D4CF40
  ~~~~~
  Server is a 'Primary Domain Controller'

  This requirement is a permanent finding for server 2016 domain controllers per DOD CIO Memo Upgrading of MS Domain Controller OS to MS Server 2019 or Later (CIO000911-23)


vuln_id: V-259334
rule_id: SV-259334r960735_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6DFE955F064B250F5DB20A0A73767541A3B1FBEC
  ~~~~~
  All Active Directory-Integrated Forward Lookup Zones have Dynamic Updates configured to 'Secure Only'.


vuln_id: V-259335
rule_id: SV-259335r987677_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 716311E4FBAAECFAAD34DF4E30AF5917CCF6742B
  ~~~~~
  EventLogLevel:		4 - All events


vuln_id: V-259338
rule_id: SV-259338r1028386_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8C3CA6264D37EAFBFDCFA35DB1F7281C237588D2
  ~~~~~
  Manage auditing and security log:

  BUILTIN\Administrators
  Exchange Servers
  S-1-5-21-1199390858-2101972093-2013113664-1129
  S-1-5-21-270843172-1021756428-1876623829-2158

  C:\windows\System32\Winevt\Logs\DNS Server.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-259339
rule_id: SV-259339r961104_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: EBD1CBF9C835BB34171A1BE7AD4ED430C4F56B9D
  ~~~~~
  All Forward Lookup Zones hosted on this server are Active Directory-integrated so this requirement is NA.


vuln_id: V-259341
rule_id: SV-259341r1081088_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 1A3871BA6DF0E6D02106B9E7ADB7A71A5DBCE497
  ~~~~~
  Forwarders are configured and enabled so this requirement is NA.

  RecursionEnable:	True

  Forwarders:
  ---------------------------
  164.231.70.121 : MNOCE-DC-01.ASHORE.MSC.NAVY.MIL
  164.231.102.4 : MNOCW-DC-01.ASHORE.MSC.NAVY.MIL


vuln_id: V-259342
rule_id: SV-259342r961470_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 5B46D5B8BFB09AAA7562E5B84BB05F605A0A79D3
  ~~~~~
  Forwarders in use and root hints are NOT disabled.

  RecursionEnable:	True
  UseRootHint:		True [finding]

  Forwarders:
  ---------------------------
  164.231.70.121 : MNOCE-DC-01.ASHORE.MSC.NAVY.MIL
  164.231.102.4 : MNOCW-DC-01.ASHORE.MSC.NAVY.MIL


vuln_id: V-259357
rule_id: SV-259357r961863_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: F9204B7D69DAD3DA8658D90BB56D2DB12C1A647F
  ~~~~~
  Configured root hints:
  ----------------------
  NameServer:	A.ROOT-SERVERS.NET.
  IPv4Address:	198.41.0.4
  IPv6Address:	2001:503:ba3e::2:30

  NameServer:	B.ROOT-SERVERS.NET.
  IPv4Address:	192.228.79.201
  IPv6Address:	2001:500:84::b

  NameServer:	C.ROOT-SERVERS.NET.
  IPv4Address:	192.33.4.12
  IPv6Address:	2001:500:2::c

  NameServer:	D.ROOT-SERVERS.NET.
  IPv4Address:	199.7.91.13
  IPv6Address:	2001:500:2d::d

  NameServer:	E.ROOT-SERVERS.NET.
  IPv4Address:	192.203.230.10
  IPv6Address:	

  NameServer:	F.ROOT-SERVERS.NET.
  IPv4Address:	192.5.5.241
  IPv6Address:	2001:500:2f::f

  NameServer:	G.ROOT-SERVERS.NET.
  IPv4Address:	192.112.36.4
  IPv6Address:	

  NameServer:	H.ROOT-SERVERS.NET.
  IPv4Address:	198.97.190.53
  IPv6Address:	2001:500:1::53

  NameServer:	I.ROOT-SERVERS.NET.
  IPv4Address:	192.36.148.17
  IPv6Address:	2001:7fe::53

  NameServer:	J.ROOT-SERVERS.NET.
  IPv4Address:	192.58.128.30
  IPv6Address:	2001:503:c27::2:30

  NameServer:	K.ROOT-SERVERS.NET.
  IPv4Address:	193.0.14.129
  IPv6Address:	2001:7fd::1

  NameServer:	L.ROOT-SERVERS.NET.
  IPv4Address:	199.7.83.42
  IPv6Address:	2001:500:9f::42

  NameServer:	M.ROOT-SERVERS.NET.
  IPv4Address:	202.12.27.33
  IPv6Address:	2001:dc3::35


vuln_id: V-259360
rule_id: SV-259360r961863_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 90BAF3DAEA7FF61AE5467FA235A328CC6E74B6C9
  ~~~~~
  No Forward Lookup Zones contain IPv6 link-local IP addresses.


vuln_id: V-259363
rule_id: SV-259363r960999_rule
status: Not_Applicable
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: A14A79735BD283F3F019111E748C74455976803D
  ~~~~~
  All zones hosted on this server are Active Directory-integrated so this requirement is NA.


vuln_id: V-259364
rule_id: SV-259364r961503_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3448E41FECCC571EA1126422ABF9142217A1FEE5
  ~~~~~
  All Forward Lookup Zones hosted on this server are Active Directory-integrated.


vuln_id: V-259367
rule_id: SV-259367r1081079_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 7EC5A18BF9192AC333D4CC14D51C880FDD39A535
  ~~~~~
  The following do not have appropriate permissions:

  C:\ProgramData\Microsoft\Crypto\Keys\125a35bfeec08eb6cf92450e6fb55cd6_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\4f35ff067d87a24bf1990e568e5f967f_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\5aed67ae076fb2f5f53881c402ba0845_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\81994d8c11e3c9f13762296e22c36316_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\a4f113d03572f30f4cb27719b2babfc6_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------


vuln_id: V-259368
rule_id: SV-259368r961041_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 29E483B2F45F4551F92EA09FA9363AA22AB35A11
  ~~~~~
  DNS Service Account:	LocalSystem

  'C:\ProgramData\Microsoft\Crypto' and all subfolders and files are owned by the DNS service account.


vuln_id: V-259369
rule_id: SV-259369r1081081_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: EA9ADF8CB9E0266A589B46264A47E80FE235F3DD
  ~~~~~
  The following do not have appropriate permissions:

  C:\ProgramData\Microsoft\Crypto

  Principal:		BUILTIN\Users
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		Everyone
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\DSS

  Principal:		BUILTIN\Users
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		Everyone
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\OIDInfo

  Principal:		APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		BUILTIN\Users
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		Everyone
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\PCPKSP

  Principal:		BUILTIN\Users
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		Everyone
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\RSA

  Principal:		BUILTIN\Users
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		Everyone
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\DSS\MachineKeys

  Principal:		Everyone
  Access:		Write, Read, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\125a35bfeec08eb6cf92450e6fb55cd6_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\4f35ff067d87a24bf1990e568e5f967f_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\5aed67ae076fb2f5f53881c402ba0845_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\81994d8c11e3c9f13762296e22c36316_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\Keys\a4f113d03572f30f4cb27719b2babfc6_e6f0542d-9c29-4936-9687-87e94910a1b8

  Principal:		CREATOR OWNER
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\OIDInfo\DsOIDInfo.dat

  Principal:		APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		BUILTIN\Users
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  Principal:		Everyone
  Access:		ReadAndExecute, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\PCPKSP\WindowsAIK

  Principal:		NT AUTHORITY\LOCAL SERVICE
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\PCPKSP\WindowsAIK\e04d2bb76e11a8d559731f8fcc875f7324bf0f22

  Principal:		NT AUTHORITY\LOCAL SERVICE
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\PCPKSP\WindowsAIK\e04d2bb76e11a8d559731f8fcc875f7324bf0f22\fb795632abfa22e9fad1700565d5c4527e380379.PCPKEY

  Principal:		NT AUTHORITY\LOCAL SERVICE
  Access:		FullControl
  Compliant:	False

  ------------------------------------------------------------------------

  C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

  Principal:		Everyone
  Access:		Write, Read, Synchronize
  Compliant:	False

  ------------------------------------------------------------------------


vuln_id: V-259374
rule_id: SV-259374r1081084_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CE977177F1D3B4FF681DCD4E2854AB3485505899
  ~~~~~
  InterfaceAlias:			Ethernet
  InterfaceIndex:			4
  InterfaceDescription:	Microsoft Hyper-V Network Adapter
  IPv4Address:			164.231.187.34
  SubnetMask:			255.255.255.240
  DefaultGateway:		164.231.187.33
  SuffixOrigin:			Manual


vuln_id: V-259377
rule_id: SV-259377r961581_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 456DE4F1E38903593FFCA404B18AA422FEA62258
  ~~~~~
  All Forward Lookup Zones have 'Use WINS forward lookup' disabled.


vuln_id: V-259395
rule_id: SV-259395r961152_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C6A595649236A4105416278AED7121A2144959E9
  ~~~~~
  Allow log on through Remote Desktop Services:
  ---------------------------
  BUILTIN\Administrators

  Deny access to this computer from the network:
  ---------------------------
  BUILTIN\Guests

  Deny log on locally:
  ---------------------------
  BUILTIN\Guests


vuln_id: V-259402
rule_id: SV-259402r987708_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9AF81AAAB8C600DB6410D96A405F37B45D9237F2
  ~~~~~
  All zones hosted on this server are Active Directory-integrated.


vuln_id: V-259403
rule_id: SV-259403r1001264_rule
status: NotAFinding
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 61E8A883CEBE6190A40D2710E426BE2D03B1A4D8
  ~~~~~
  EnableVersionQuery:	0


vuln_id: V-259412
rule_id: SV-259412r961125_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 986E2AA371EE57C0BE58CB7A9BFDD5C0FC13FA58
  ~~~~~
  File System:	No Auditing


vuln_id: V-259413
rule_id: SV-259413r961863_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 9377041A89A7C9A003652C7FB32E437D88669A67
  ~~~~~
  Service Name:	DNS Server
  Log on as:	LocalSystem


vuln_id: V-259417
rule_id: SV-259417r961155_rule
status: Open
hostname: MONT-DC-003
host_ip: 164.231.187.34
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServerDNS_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 0B575F416B20B37BBFDE2A14E481ED5B2F0C8C53
  ~~~~~
  Mode:	Disable


vuln_id: V-223016
rule_id: SV-223016r879612_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\S.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105
  ResultHash: 32D86210A05E099037BAB412E2AF80F2F617EEB6
  ~~~~~
  'Check for publisher's certificate revocation' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing
  Value Name:	State
  Value:		0x00023c00 (146432)
  Type:		REG_DWORD


vuln_id: V-223122
rule_id: SV-223122r879587_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\S.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105
  ResultHash: 382AD38FCBA64A9F53AF61676CEDEA4F977DD85B
  ~~~~~
  'Disable AutoComplete for forms' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	Use FormSuggest
  Value:		no
  Type:		REG_SZ


vuln_id: V-223124
rule_id: SV-223124r879587_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\S.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105
  ResultHash: 00F941666874CF674955B67D36AE5EFBDCBE41DE
  ~~~~~
  'Turn on the auto-complete feature for user names and passwords on forms' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	FormSuggest Passwords
  Value:		no
  Type:		REG_SZ

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main
  Value Name:	FormSuggest PW Ask
  Value:		no
  Type:		REG_SZ


vuln_id: V-224820
rule_id: SV-224820r1038967_rule
status: Open
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 02584B707ED8F7A6BBB550AB8007006439022FB2
  ~~~~~
  Password for the built-in Administrator account (X_Admin) was last changed on 01/14/2021 03:03:50 (1743 days ago)


vuln_id: V-224831
rule_id: SV-224831r958472_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 27E3EFED84E2366F9C7E05423896CE7B66B7D30A
  ~~~~~
  All disk file systems are NTFS or ReFS.

  Device ID:		C:
  Drive Type:		Local Disk (3)
  Volume Name:		DB-002-OS
  File System:		NTFS

  Device ID:		D:
  Drive Type:		Local Disk (3)
  Volume Name:		PROGLOGS
  File System:		NTFS

  Device ID:		E:
  Drive Type:		Local Disk (3)
  Volume Name:		DATA
  File System:		NTFS

  Device ID:		G:
  Drive Type:		Local Disk (3)
  Volume Name:		LogiQuest
  File System:		NTFS

  Device ID:		O:
  Drive Type:		Local Disk (3)
  Volume Name:		IBS
  File System:		NTFS


vuln_id: V-224837
rule_id: SV-224837r958482_rule
status: Open
comments: documentation
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 11F54D137F8E9EEA8782F3EBBEC2DCD07E124714
  ~~~~~
  Failed accounts:
  ---------------------
  Name:		DOD_Admin
  SID:			S-1-5-21-3489894170-526094123-3548415114-1000
  Enabled:		True
  Last Logon:	07/06/2023 06:13:35 [840 days]


vuln_id: V-224842
rule_id: SV-224842r991589_rule
status: Open
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 0D40248E7448FCD0ECA615A2881C86BAFE70E90B
  ~~~~~
  Certificate .p12 and/or .pfx files:
  ---------------------
  File:		MONT-DB-002.montford-point.navy.mil.pfx
  Path:		E:\SQL Anywhere 16\Application Certificate Files\DoD
  Created:	06/21/2023 15:54:54

  File:		MONTFOR-DB-001.montford-point.navy.mil.pfx
  Path:		E:\SQL Anywhere 16\Backup\SAMMDatabase-20230620161919\DoD
  Created:	06/20/2023 16:21:04

  File:		MONTFOR-DB-001.montford-point.navy.mil.pfx
  Path:		E:\SQL Anywhere 16\Backup\SAMMDatabase-20230620212252\DoD
  Created:	06/20/2023 21:22:56

  File:		MONT-DB-002.montford-point.navy.mil.pfx
  Path:		E:\SQL Anywhere 16\Backup\SAMMDatabase-20230621155610\DoD
  Created:	06/21/2023 15:56:15

  File:		MONT-DB-002.montford-point.navy.mil.pfx
  Path:		E:\SQL Anywhere 16\Backup\SAMMDatabase-20230621160233\DoD
  Created:	06/21/2023 16:02:36

  File:		MONT-DB-002.montford-point.navy.mil.pfx
  Path:		E:\SQL Anywhere 16\Backup\SAMMDatabase-20230621161956\DoD
  Created:	06/21/2023 16:19:59


vuln_id: V-224845
rule_id: SV-224845r958478_rule
status: Open
comments: documentation
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: BE7C19DDE65138A644FC9087711F70D0C7FDDD1C
  ~~~~~
  Installed Roles:
  ---------------------
  File and Storage Services

  Installed Role Services:
  ---------------------
  File and iSCSI Services
  File Server
  Storage Services

  Installed Features:
  ---------------------
  .NET Framework 4.6 Features
  .NET Framework 4.6
  WCF Services
  TCP Port Sharing
  Windows PowerShell
  Windows PowerShell 5.1
  Windows PowerShell ISE
  WoW64 Support


vuln_id: V-225007
rule_id: SV-225007r958726_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 3079F2CB216B05B092D336E25D350B864AFC05D2
  ~~~~~
  The following are members of the local Administrators group:
  ---------------------
  Name:		MONT-DB-002\DOD_Admin
  objectClass:	User
  objectSID:	S-1-5-21-3489894170-526094123-3548415114-1000

  Name:		MONT-DB-002\X_Admin
  objectClass:	User
  objectSID:	S-1-5-21-3489894170-526094123-3548415114-500

  Name:		MONTFORD-POINT\Server Administrator Group
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1109


vuln_id: V-225008
rule_id: SV-225008r958518_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\S.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105
  ResultHash: E24FAFA899A9EF37673E36B9DA7CDC2E96352FB5
  ~~~~~
  'Apply UAC restrictions to local accounts on network logons' is Enabled

  Registry Path:	
  Value Name:	LocalAccountTokenFilterPolicy
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-225069
rule_id: SV-225069r991589_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\S.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105
  ResultHash: E1E8733E0EB898F9D2EF428AC96620439C92F3E6
  ~~~~~
  'Do not preserve zone information in file attachments' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments
  Value Name:	SaveZoneInformation (Not found)


vuln_id: V-236000
rule_id: SV-236000r958478_rule
status: NotAFinding
hostname: MONT-DB-002
host_ip: 164.231.187.38
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\S.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1105
  ResultHash: 77C995428C2623C12745CA5F3EB37B8F7B8DEC30
  ~~~~~
  'Turn off Preview Pane' is Enabled
  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoPreviewPane
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  'Turn on or off details pane' is Enabled: (Always hide)
  Registry Path:	HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoReadingPane
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-225236
rule_id: SV-225236r1069477_rule
status: Open
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:39
updated_at: 2026-01-14 17:57:39
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 1E5FAD6C7F6E6F796EB6A2FA1A9D4975C326A325
  ~~~~~
  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\SQL2017\x64\FixSqlRegistryKey_x64.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\SQL2017\x64\FixSqlRegistryKey_x86.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\SQL2017\x64\LandingPage.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\SQL2017\x64\ScenarioEngine.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\SQL2017\x64\SetupARP.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5063760\GDR\x64\fixsqlregistrykey_x64.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5063760\GDR\x64\fixsqlregistrykey_x86.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5063760\GDR\x64\landingpage.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5063760\GDR\x64\scenarioengine.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5065224\GDR\x64\fixsqlregistrykey_x64.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5065224\GDR\x64\fixsqlregistrykey_x86.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5065224\GDR\x64\landingpage.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Setup Bootstrap\Update Cache\KB5065224\GDR\x64\scenarioengine.exe
  Net4Runtimes: 4.0

  C:\Program Files\Microsoft SQL Server\140\Tools\Binn\SqlLogShip.exe
  Net4Runtimes: 4.0

  C:\Program Files (x86)\Microsoft SQL Server\140\Tools\Binn\SQLPS.exe
  Net4Runtimes: 4.0

  C:\Users\montford.backup\AppData\Local\Temp\MSSQL_BKUPEXEC64\x64\FIXSQLREGISTRYKEY_X64.EXE
  Net4Runtimes: 4.0

  C:\Users\montford.backup\AppData\Local\Temp\MSSQL_BKUPEXEC64\x64\FIXSQLREGISTRYKEY_X86.EXE
  Net4Runtimes: 4.0

  C:\Users\montford.backup\AppData\Local\Temp\MSSQL_BKUPEXEC64\x64\LANDINGPAGE.EXE
  Net4Runtimes: 4.0

  C:\Users\montford.backup\AppData\Local\Temp\MSSQL_BKUPEXEC64\x64\SCENARIOENGINE.EXE
  Net4Runtimes: 4.0


vuln_id: V-213900
rule_id: SV-213900r1043176_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: F911D1618A43C229D41C33D29888EAA6D14257A5
  ~~~~~
  Instance does not have Contained Databases enabled.


vuln_id: V-213901
rule_id: SV-213901r1112497_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 4E0BE29691469BB6268E1305E905DFBC61DC8366
  ~~~~~
  Review the system documentation to determine the required levels of protection for securables in the database by type of user, then compare that against the following permissions actually in place in the database. If the actual permissions do not match the documented requirements, this is a finding.

  Here are the row counts and checksums for the three queries in the supplemental STIG file 'Database permission assignments to users and roles.sql':

  QueryType  ResultCount   CheckSum
  ---------  -----------   --------
  Owner                1   34509070
  Privileges          59 -882091564
  Roles                1  510085263



  Details for the Database Owner query:

  database_owner
  --------------
  sa            



  Details for the Database Roles query:

  database_role role_member
  ------------- -----------
  db_owner      dbo        



  Details for the Privileges query:    

  grantee_type  grantee state_desc permission_name                           securable_class      schema_or_owner securable                    column_name grantor_type grantor
  ------------  ------- ---------- ---------------                           ---------------      --------------- ---------                    ----------- ------------ -------
  SQL_USER      dbo     GRANT      CONNECT                                   DATABASE                             BEDB                                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      VIEW ANY COLUMN ENCRYPTION KEY DEFINITION DATABASE                             BEDB                                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      VIEW ANY COLUMN MASTER KEY DEFINITION     DATABASE                             BEDB                                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatDeletionEvent                         SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatDeletionEvent                         SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatDeletionEvent                         SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatDeletionEvent                         SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatDeletionEvent                         SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      EXECUTE                                   SQL_STORED_PROCEDURE dbo             CatDeletionEventProc                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatDlmProcessedImage                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatDlmProcessedImage                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatDlmProcessedImage                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatDlmProcessedImage                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatDlmProcessedImage                     SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatEvents                                SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatEvents                                SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatEvents                                SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatEvents                                SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatEvents                                SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatFragment                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatFragment                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatFragment                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatFragment                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatFragment                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      EXECUTE                                   SQL_STORED_PROCEDURE dbo             CatFragmentProc                          SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatImage                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatImage                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatImage                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatImage                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatImage                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatMedia                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatMedia                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatMedia                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatMedia                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatMedia                                 SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      EXECUTE                                   SQL_STORED_PROCEDURE dbo             CatMediaProc                             SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatPieceIdTable                          SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatPieceIdTable                          SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatPieceIdTable                          SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatPieceIdTable                          SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatPieceIdTable                          SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      EXECUTE                                   SQL_STORED_PROCEDURE dbo             CatPieceIdTableProc                      SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatResource                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatResource                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatResource                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatResource                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatResource                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             CatSynthTable                            SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             CatSynthTable                            SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             CatSynthTable                            SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             CatSynthTable                            SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             CatSynthTable                            SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      DELETE                                    USER_TABLE           dbo             ControlInfo                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      INSERT                                    USER_TABLE           dbo             ControlInfo                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      REFERENCES                                USER_TABLE           dbo             ControlInfo                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      SELECT                                    USER_TABLE           dbo             ControlInfo                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      UPDATE                                    USER_TABLE           dbo             ControlInfo                              SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      EXECUTE                                   SQL_STORED_PROCEDURE dbo             DeleteOrphandedResourcesProc             SQL_USER     dbo    
  DATABASE_ROLE public  GRANT      EXECUTE                                   SQL_STORED_PROCEDURE dbo             InsertVirtualSet                         SQL_USER     dbo


vuln_id: V-213902
rule_id: SV-213902r960864_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: B63E0AD1F33856D056FB50B5C1C7A78CE1BAEA67
  ~~~~~
  NOT A FINDING: The check query returned no results.


vuln_id: V-213903
rule_id: SV-213903r960864_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 382E8443E6E7F9FACA088987985F92066F8CD83D
  ~~~~~
  DBA, Using the system documentation, determine which tables in this database are required to be temporal tables.

  If the documentation lists any tables at all, mark this vulnerability as a finding because no such tables exist.


vuln_id: V-213904
rule_id: SV-213904r960864_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 0ACECDF9E0767F6A2D9E77EB2554ACC2AC0ACA4B
  ~~~~~
  DBA, Confirm that an approved server documentation documents the need for TRUSTWORTHY in the following:
  InstanceName           Database DatabaseOwner IsOwnerPrivileged
  ------------           -------- ------------- -----------------
  MONT-BE-002\BKUPEXEC64 BEDB     sa            YES


vuln_id: V-213905
rule_id: SV-213905r960882_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 7C5804625F69F918F66071C5D03C50EB7D91BF98
  ~~~~~
  The only account authorized to act as a db owner is 'dbo', but DISA still requires it be documented as authorized:

  role_name role_member_name type_desc
  --------- ---------------- ---------
  db_owner  dbo              SQL_USER


vuln_id: V-213906
rule_id: SV-213906r960960_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 1ECA956516DA093168EADA17AB3EA5E1C5ED41C1
  ~~~~~
  No results were returned by the check queries.


vuln_id: V-213907
rule_id: SV-213907r960960_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: A98892EF5388104C56E8D20C589B864AEFC2578F
  ~~~~~
  No principals other than the standard MSSQL principals own database schemas.


vuln_id: V-213908
rule_id: SV-213908r960960_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: AD5580665A64A351514BDE4964A09A2B55DACAE4
  ~~~~~
  No results were returned by the check query.


vuln_id: V-213910
rule_id: SV-213910r961125_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 8E9EDCB5731473AF6C0985483D9DA6823A8C71C2
  ~~~~~
  DBA, Using the system documentation, confirm, the following recovery models.If the recovery model description does not match the documented recovery model, this is a finding.:

  name recovery_model_desc
  ---- -------------------
  BEDB SIMPLE             


  DBA, Review the jobs set up to implement the backup plan. If they are absent, this is a finding.
  Jobs set up to implement the backup plan:

  database_name backup_type is_copy_only backup_start_date      backup_finish_date    
  ------------- ----------- ------------ -----------------      ------------------    
  BEDB          Full                True 10/23/2025 4:00:00 AM  10/23/2025 4:00:02 AM 
  BEDB          Full                True 10/22/2025 11:50:20 PM 10/22/2025 11:51:06 PM
  BEDB          Full                True 10/22/2025 4:00:00 AM  10/22/2025 4:00:01 AM 
  BEDB          Full                True 10/21/2025 11:49:04 PM 10/21/2025 11:49:50 PM
  BEDB          Full                True 10/21/2025 4:00:00 AM  10/21/2025 4:00:01 AM 
  BEDB          Full                True 10/20/2025 11:50:18 PM 10/20/2025 11:51:03 PM
  BEDB          Full                True 10/20/2025 4:00:00 AM  10/20/2025 4:00:02 AM 
  BEDB          Full               False 10/20/2025 12:45:48 AM 10/20/2025 12:46:38 AM
  BEDB          Full                True 10/19/2025 11:42:52 AM 10/19/2025 11:43:41 AM
  BEDB          Full                True 10/19/2025 4:00:02 AM  10/19/2025 4:00:03 AM 
  BEDB          Full                True 10/18/2025 4:00:00 AM  10/18/2025 4:00:01 AM 
  BEDB          Full                True 10/17/2025 4:00:00 AM  10/17/2025 4:00:01 AM 
  BEDB          Full                True 10/16/2025 11:59:28 PM 10/17/2025 12:00:12 AM
  BEDB          Full                True 10/16/2025 4:00:00 AM  10/16/2025 4:00:02 AM 
  BEDB          Full                True 10/16/2025 12:06:43 AM 10/16/2025 12:07:25 AM
  BEDB          Full                True 10/15/2025 4:00:01 AM  10/15/2025 4:00:03 AM 
  BEDB          Full                True 10/15/2025 12:05:53 AM 10/15/2025 12:06:33 AM
  BEDB          Full                True 10/14/2025 4:00:00 AM  10/14/2025 4:00:01 AM 
  BEDB          Full                True 10/13/2025 11:51:13 PM 10/13/2025 11:51:57 PM
  BEDB          Full               False 10/13/2025 4:36:27 AM  10/13/2025 4:37:13 AM 
  BEDB          Full                True 10/13/2025 4:00:00 AM  10/13/2025 4:00:03 AM 
  BEDB          Full                True 10/12/2025 4:00:00 AM  10/12/2025 4:00:00 AM 
  BEDB          Full                True 10/11/2025 11:10:33 PM 10/11/2025 11:11:19 PM
  BEDB          Full                True 10/11/2025 4:00:00 AM  10/11/2025 4:00:01 AM 
  BEDB          Full                True 10/10/2025 11:53:50 PM 10/10/2025 11:54:36 PM
  BEDB          Full                True 10/10/2025 4:00:00 AM  10/10/2025 4:00:01 AM 
  BEDB          Full                True 10/9/2025 11:55:02 PM  10/9/2025 11:55:48 PM 
  BEDB          Full                True 10/9/2025 4:00:00 AM   10/9/2025 4:00:01 AM  
  BEDB          Full                True 10/8/2025 11:57:52 PM  10/8/2025 11:58:38 PM 
  BEDB          Full                True 10/8/2025 4:00:00 AM   10/8/2025 4:00:01 AM  
  BEDB          Full                True 10/7/2025 11:58:55 PM  10/7/2025 11:59:41 PM 
  BEDB          Full                True 10/7/2025 4:00:00 AM   10/7/2025 4:00:02 AM  
  BEDB          Full                True 10/6/2025 11:59:54 PM  10/7/2025 12:00:39 AM 
  BEDB          Full               False 10/6/2025 4:06:44 AM   10/6/2025 4:07:33 AM  
  BEDB          Full                True 10/6/2025 4:00:00 AM   10/6/2025 4:00:02 AM  
  BEDB          Full                True 10/5/2025 4:00:01 AM   10/5/2025 4:00:02 AM  
  BEDB          Full                True 10/5/2025 12:08:59 AM  10/5/2025 12:09:45 AM 
  BEDB          Full                True 10/4/2025 4:00:00 AM   10/4/2025 4:00:01 AM  
  BEDB          Full                True 10/3/2025 11:58:04 PM  10/3/2025 11:58:50 PM 
  BEDB          Full                True 10/3/2025 4:00:00 AM   10/3/2025 4:00:01 AM  
  BEDB          Full                True 10/2/2025 11:57:21 PM  10/2/2025 11:58:06 PM 
  BEDB          Full                True 10/2/2025 4:00:00 AM   10/2/2025 4:00:01 AM  
  BEDB          Full                True 10/1/2025 11:57:36 PM  10/1/2025 11:58:21 PM 
  BEDB          Full                True 10/1/2025 4:00:00 AM   10/1/2025 4:00:01 AM  
  BEDB          Full                True 9/30/2025 11:52:43 PM  9/30/2025 11:53:28 PM 
  BEDB          Full                True 9/30/2025 4:00:01 AM   9/30/2025 4:00:02 AM  
  BEDB          Full                True 9/29/2025 11:53:11 PM  9/29/2025 11:53:56 PM 
  BEDB          Full               False 9/29/2025 4:10:28 AM   9/29/2025 4:11:17 AM  
  BEDB          Full                True 9/29/2025 4:00:00 AM   9/29/2025 4:00:01 AM  
  BEDB          Full                True 9/28/2025 4:00:00 AM   9/28/2025 4:00:02 AM  
  BEDB          Full                True 9/27/2025 11:51:05 PM  9/27/2025 11:51:50 PM 
  BEDB          Full                True 9/27/2025 4:00:00 AM   9/27/2025 4:00:02 AM  
  BEDB          Full                True 9/26/2025 11:52:32 PM  9/26/2025 11:53:17 PM 
  BEDB          Full                True 9/26/2025 4:00:00 AM   9/26/2025 4:00:02 AM  
  BEDB          Full                True 9/25/2025 11:56:08 PM  9/25/2025 11:56:53 PM 
  BEDB          Full                True 9/25/2025 11:34:56 AM  9/25/2025 11:35:42 AM 
  BEDB          Full                True 9/25/2025 4:00:01 AM   9/25/2025 4:00:01 AM  
  BEDB          Full                True 9/24/2025 12:12:36 PM  9/24/2025 12:13:21 PM 
  BEDB          Full                True 9/24/2025 4:00:00 AM   9/24/2025 4:00:01 AM  
  BEDB          Full                True 9/23/2025 7:41:09 PM   9/23/2025 7:41:54 PM


vuln_id: V-213911
rule_id: SV-213911r961128_rule
status: Not_Applicable
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT APPLICABLE on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: DDA1FD1A0A4D393B25E5DA328D2584C79BFFCC60
  ~~~~~
  No database master keys exist.


vuln_id: V-213914
rule_id: SV-213914r961131_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: DD3B0DF50BA0D49C44E09088B157BC178BD023F1
  ~~~~~
  DBA, Review the database structure to determine where security related functionality is stored.
   If security-related database objects or code are not kept separate, this is a finding:

  Name
  ----
  BEDB


vuln_id: V-213924
rule_id: SV-213924r961461_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: F3ECBD3C11F8BAF819620F5F091A10379266B2E4
  ~~~~~
  DBA, Remove unauthorized users from roles

  database_name owner_name is_fixed_role_member
  ------------- ---------- --------------------
  BEDB          sa                            1


vuln_id: V-213926
rule_id: SV-213926r1018576_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 66B2395E4819598547AA9A752F7C6724D60F98EB
  ~~~~~
  No database encryption key was found.

  Documentation needs reviewed to see if encryption is required.


vuln_id: V-251040
rule_id: SV-251040r962034_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: BEDB
  ResultHash: 578FC3916E0B120A53A8FEE87983CE61ED19852F
  ~~~~~
  'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\
  Value Name:	Enabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213900
rule_id: SV-213900r1043176_rule
status: NotAFinding
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) found this to be NOT A FINDING on 10/23/2025
  Instance: MONT-BE-002\BKUPEXEC64
  Database: master
  ResultHash: F911D1618A43C229D41C33D29888EAA6D14257A5
  ~~~~~
  Instance does not have Contained Databases enabled.


vuln_id: V-213901
rule_id: SV-213901r1112497_rule
status: Not_Reviewed
hostname: MONT-BE-002
host_ip: 164.231.187.37
workflow_status: Open
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-SqlServer2016Database_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  Instance: MONT-BE-002\BKUPEXEC64
  Database: master
  ResultHash: A5133F4A8B2717CDEB397EC5433932ABBE14A87B
  ~~~~~
  Review the system documentation to determine the required levels of protection for securables in the database by type of user, then compare that against the following permissions actually in place in the database. If the actual permissions do not match the documented requirements, this is a finding.

  Here are the row counts and checksums for the three queries in the supplemental STIG file 'Database permission assignments to users and roles.sql':

  QueryType  ResultCount    CheckSum
  ---------  -----------    --------
  Owner                1    34509070
  Privileges        2260 -1243632689
  Roles                1   510085263



  Details for the Database Owner query:

  database_owner
  --------------
  sa            



  Details for the Database Roles query:

  database_role role_member
  ------------- -----------
  db_owner      dbo        



  Details for the Privileges query:    

  grantee_type            grantee                           state_desc permission_name                           securable_class                  schema_or_owner    securable                            
  ------------            -------                           ---------- ---------------                           ---------------                  ---------------    ---------                            
  CERTIFICATE_MAPPED_USER ##MS_AgentSigningCertificate##    GRANT      CONNECT                                   DATABASE                                            master                               
  CERTIFICATE_MAPPED_USER ##MS_AgentSigningCertificate##    GRANT      EXECUTE                                   DATABASE                                            master                               
  SQL_USER                ##MS_PolicyEventProcessingLogin## GRANT      CONNECT                                   DATABASE                                            master                               
  SQL_USER                ##MS_PolicyEventProcessingLogin## GRANT      EXECUTE                                   SQL_STORED_PROCEDURE             sys                sp_syspolicy_execute_policy          
  SQL_USER                dbo                               GRANT      CONNECT                                   DATABASE                                            master                               
  SQL_USER                guest                             GRANT      CONNECT                                   DATABASE                                            master                               
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1005...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1030...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1042...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1046...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1059...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1063...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1069...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1078...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1090...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1104...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1163...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1182...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1189...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1337...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1361...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1369...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1425...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1465...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1529...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1786...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1792...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -1814...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2059...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2063...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2144...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2271...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2318...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2397...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2456...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2456...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2462...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2520...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2610...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -2978...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3055...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3144...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3160...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3226...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3319...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3462...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3508...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3624...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3825...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -3984...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4083...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4095...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4129...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4159...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4167...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4258...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4317...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4438...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4633...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4642...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4714...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4730...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4810...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4828...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -4975...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5004...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5043...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5200...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5221...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5233...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5261...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5313...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5378...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5381...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5462...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5576...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5683...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5846...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -590 ***
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5905...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -591 ***
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -592 ***
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -593 ***
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -5963...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6084...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6219...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6234...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6259...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6366...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6383...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6385...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6495...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6584...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6724...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -6980...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7167...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7264...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7310...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7327...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7362...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7494...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7578...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7644...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7786...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7850...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7909...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7947...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -7989...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8028...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8167...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8186...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8248...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8268...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8300...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8481...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8483...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8604...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8752...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8824...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8834...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8962...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -8986...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9111...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9139...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9273...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9343...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9442...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9679...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9764...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9798...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9861...
  DATABASE_ROLE           public                            GRANT      SELECT                                    OBJECT                                              *** Internal Hidden Object : -9886...
  DATABASE_ROLE           public                            GRANT      VIEW ANY COLUMN ENCRYPTION KEY DEFINITION DATABASE                                            master                               
  DATABASE_ROLE           public                            GRANT      VIEW ANY COLUMN MASTER KEY DEFINITION     DATABASE                                            master                               
  DATABASE_ROLE           public                            GRANT      SELECT                                    USER_TABLE                       dbo                spt_fallback_db                      
  DATABASE_ROLE           public                            GRANT      SELECT                                    USER_TABLE                       dbo                spt_fallback_dev                     
  DATABASE_ROLE           public                            GRANT      SELECT                                    USER_TABLE                       dbo                spt_fallback_usg                     
  DATABASE_ROLE           public                            GRANT      SELECT                                    USER_TABLE                       dbo                spt_monitor                          
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             dbo                spt_values                           
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA CHECK_CONSTRAINTS                    
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA COLUMN_DOMAIN_USAGE                  
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA COLUMN_PRIVILEGES                    
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA COLUMNS                              
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA CONSTRAINT_COLUMN_USAGE              
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA CONSTRAINT_TABLE_USAGE               
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA DOMAIN_CONSTRAINTS                   
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA DOMAINS                              
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA KEY_COLUMN_USAGE                     
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA PARAMETERS                           
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA REFERENTIAL_CONSTRAINTS              
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA ROUTINE_COLUMNS                      
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA ROUTINES                             
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMATION_SCHEMA SCHEMATA                             
  DATABASE_ROLE           public                            GRANT      SELECT                                    VIEW                             INFORMA

  ---truncated results. met character limit---


