| Hostname | IP Address | Status | Assigned To | Last Scan | Actions |
|---|---|---|---|---|---|
| MONT-AP-002 | 164.231.187.39 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
| MONT-BE-002 | 164.231.187.37 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
| MONT-DB-002 | 164.231.187.38 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
| MONT-DC-003 | 164.231.187.34 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: 8321877B1939868783133E67C0DB12AC4A135F79 ~~~~~ The following accounts are enabled without requiring a smart card. Account Name: SHB_Admin Account Enabled: True Smart card Required: False Account Name: DOD_Admin Account Enabled: True Smart card Required: False Account Name: D.Admin Account Enabled: True Smart card Required: False Account Name: S.Admin Account Enabled: True Smart card Required: False Account Name: W.Admin Account Enabled: True Smart card Required: False Account Name: N.Admin Account Enabled: True Smart card Required: False Account Name: Exchange Admin Account Enabled: True Smart card Required: False Account Name: HealthMailbox03020cb359cd4879a5fd73f010bde991 Account Enabled: True Smart card Required: False Account Name: HealthMailbox3295a98105294ef195ff4f5394ae0e3c Account Enabled: True Smart card Required: False Account Name: HealthMailbox8d8eb4c107e64340876668cde6c1289e Account Enabled: True Smart card Required: False Account Name: HealthMailboxfd82eb3f816c4428bcc7a1706f017682 Account Enabled: True Smart card Required: False Account Name: HealthMailbox4ffeb90d1e3e42808987669877a590dc Account Enabled: True Smart card Required: False Account Name: HealthMailboxa7603ef65a894a7abd37cc7afcd0498f Account Enabled: True Smart card Required: False Account Name: HealthMailbox0045b0edfe864ade8de6332392102884 Account Enabled: True Smart card Required: False Account Name: HealthMailbox2a4e029adc2c45d7a2377f21fc959267 Account Enabled: True Smart card Required: False Account Name: HealthMailboxff1c61cd50724325bd1467262f3ab3f7 Account Enabled: True Smart card Required: False Account Name: HealthMailbox476aa3607f714413bb95f561ccbef1c1 Account Enabled: True Smart card Required: False Account Name: HealthMailboxa75cf849d12c447fb0c70e70b866e36e Account Enabled: True Smart card Required: False Account Name: MONT-EM-NAA Account Enabled: True Smart card Required: False Account Name: MONT-EM-SVRCP Account Enabled: True Smart card Required: False Account Name: MONT-EM-WKSCP Account Enabled: True Smart card Required: False Account Name: MONT-EM-Admin Account Enabled: True Smart card Required: False Account Name: Backup Account Enabled: True Smart card Required: False Account Name: Walton, Nicole E., CTR Account Enabled: True Smart card Required: False Account Name: Scan Admin Account Enabled: True Smart card Required: False Account Name: FIM, ANOC Account Enabled: True Smart card Required: False Account Name: IA ADMIN, JTBegarek Account Enabled: True Smart card Required: False Account Name: user, test Account Enabled: True Smart card Required: False Account Name: Gonzalez, Ian W., CTR Account Enabled: True Smart card Required: False Account Name: MSMEODUser Account Enabled: True Smart card Required: False Account Name: User, Test C., CTR Account Enabled: True Smart card Required: False Account Name: Smith, Alexander D., CTR Account Enabled: True Smart card Required: False Account Name: Jones, Thomas L., Admin Account Enabled: True Smart card Required: False Account Name: Jones, Thomas Account Enabled: True Smart card Required: False Account Name: Green, Fred D., CTR Account Enabled: True Smart card Required: False Account Name: Sanders, James R., CTR Account Enabled: True Smart card Required: False Account Name: Muchuslky, Joey Account Enabled: True Smart card Required: False Account Name: Simon, Anthony E., CTR Account Enabled: True Smart card Required: False Account Name: Begarek, Justin T., CIV Account Enabled: True Smart card Required: False Account Name: Smith, Josh A., CTR Account Enabled: True Smart card Required: False Comments |
|||||
| MONT-DP-001 | 164.231.187.44 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
| MONT-MB-002 | 164.231.187.36 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
| MONT-VSF-003 | 164.231.187.42 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
| MONT-VSF-004 | 164.231.187.43 | 2026-01-14 | |||
Finding DetailsEvaluate-STIG 1.2507.5 (Scan-WindowsServer2016_Checks) found this to be NOT APPLICABLE on 10/23/2025 ResultHash: F7DE991FB49346C9EC2F2DEEB9D564F37D7ACC9E ~~~~~ System is a 'Member Server' so this requirement is NA. Comments |
|||||
Check Text
This applies to domain controllers. It is NA for other systems. Open "PowerShell". Enter the following: "Get-ADUser -Filter {(Enabled -eq $True) -and (SmartcardLogonRequired -eq $False)} | FT Name" ("DistinguishedName" may be substituted for "Name" for more detailed output.) If any user accounts, including administrators, are listed, this is a finding. Alternately: To view sample accounts in "Active Directory Users and Computers" (available from various menus or run "dsa.msc"): Select the Organizational Unit (OU) where the user accounts are located. (By default, this is the Users node; however, accounts may be under other organization-defined OUs.) Right-click the sample user account and select "Properties". Select the "Account" tab. If any user accounts, including administrators, do not have "Smart card is required for interactive logon" checked in the "Account Options" area, this is a finding.
Fix Text
Configure all user accounts, including administrator accounts, in Active Directory to enable the option "Smart card is required for interactive logon". Run "Active Directory Users and Computers" (available from various menus or run "dsa.msc"): Select the OU where the user accounts are located. (By default this is the Users node; however, accounts may be under other organization-defined OUs.) Right-click the user account and select "Properties". Select the "Account" tab. Check "Smart card is required for interactive logon" in the "Account Options" area.