STIGQter: STIG Summary: Microsoft Windows Server Domain Name System (DNS) Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Jul 2026:

The Windows DNS Server must, when a component failure is detected, activate a notification to the system administrator.

DISA Rule

SV-259405r1156945_rule

Vulnerability Number

V-259405

Group Title

SRG-APP-000268-DNS-000039

Rule Version

WDNS-22-000077

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-001328 - If system component failures are detected, activate an organization-defined alarm, automatically shut down the system, and/or organization-defined action.

Weight

10

Fix Recommendation

Implement a third-party monitoring system to detect and notify the system administrator upon component failure or, at a minimum, document and implement a procedure to review the diagnostic logs on a routine basis every day.

Check Contents

Notification to the system administrator is not configurable in Windows DNS Server. For system administrators to be notified when a component fails, the system administrator would have to implement a third-party monitoring system. At a minimum, the system administrator should have a documented procedure in place to review the diagnostic logs on a routine basis every day.

If a third-party monitoring system is not in place to detect and notify the system administrator upon component failures, and the system administrator does not have a documented procedure in place to review the diagnostic logs on a routine basis every day, this is a finding.

Vulnerability Number

V-259405

Documentable

False

Rule Version

WDNS-22-000077

Severity Override Guidance

Notification to the system administrator is not configurable in Windows DNS Server. For system administrators to be notified when a component fails, the system administrator would have to implement a third-party monitoring system. At a minimum, the system administrator should have a documented procedure in place to review the diagnostic logs on a routine basis every day.

If a third-party monitoring system is not in place to detect and notify the system administrator upon component failures, and the system administrator does not have a documented procedure in place to review the diagnostic logs on a routine basis every day, this is a finding.

Check Content Reference

M

Target Key

5576