KHIKA Standard Hardening Policies

KHIKA Server Hardening for Windows Servers

The Policies and rules available in the default Server Hardening template provided by KHIKA for Windows Servers (2007 onwards) is as mentioned below:

Policy Name	Rule Name and Description	Desired Value
Account & Password Policy	Password Age Minimum - Number of days for which user must use password before it can be changed.	1 Day
	Password Age Maximum - Number of days after which password expires.	45 Days
	Password Length Minimum - The least number of characters that can make up a password for a user account.	8 Characters
	Password Complexity level - Denotes whether password complexity is enabled.	Enabled
	Password History count - The number of unique new passwords that have to be associated with a user account before an old password can be reused.	5 passwords
	Password lock out count - Number of failed logon attempts after which a user account MUST be locked out.	5 attempts
	Administrator Name - Denotes Administrator Account Name.	Administrator
	Password in clear text - Determines whether passwords are stored using reverse encryption .	Disabled
	Guest Account Enable/Disable - Denotes whether the Guest account is enabled or disabled.	Disabled
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example
Example	Example	Example