ecklerwr1, You are correct when apply DISA STIGs to the server. Most of the issue is focused around .NET and IIS. I always request a phased approcach to application of Server STIGs to my servers. I have them do a small batch 5-15 at a time so we can go back and fix if needed. I do not have a list of exceptions to give but I would split the list and take it slow.
↧