<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Product:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"><br>
BigFix Compliance</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"><br>
Updated </span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:black">DISA
STIG Checklist for Windows Server 2019</span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> to support a more recent
version of the benchmark.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Security Benchmark:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:black">DISA STIG Checklist for Windows Server 2019</span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Benchmark, V3R5</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Published Sites:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/t/bigfix-compliance-updated-cis-checklist-for-windows-server-2019-published-2025-09-10/52686"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:black;text-decoration-line:none">DISA STIG Checklist for Windows Server 2019</span><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(34,34,34);text-decoration-line:none"> </span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">, site version 22.<br>
(The site version is provided for air-gap customers.)</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Details: </span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total New Fixlets: 0</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total Updated Fixlets: 3</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total Deleted Fixlets: 0</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Total Fixlets in Site: 219</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">UPDATED:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2019 local volumes must use a format
that supports NTFS attributes.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2019 must restrict remote calls to
the Security Account Manager (SAM) to Administrators on domain-joined member
servers and standalone or nondomain-joined systems.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Windows Server 2019 must have the US DoD CCEB
Interoperability Root CA cross-certificates in the Untrusted Certificates Store
on unclassified systems.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Both analysis and remediation checks are included</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Some of the checks allow you to use the
parameterized setting to enable customization for compliance evaluation. Note
that parameterization and remediation actions require the creation of a custom
site.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Actions to take:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">To subscribe to the above site, you can use the
License Overview Dashboard to enable and gather the site. Note that you must be
entitled to the BigFix Compliance product, and you must be using BigFix version
10 and later.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">If you use custom sites, update your custom sites
accordingly to use the latest content. You can synchronize your content by
using the Synchronize Custom Checks wizard. For more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">More information:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"><br>
To know more information about the BigFix Compliance SCM checklists, please see
the following resources:</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Forum:<br>
</span><span lang="EN" style="color:black"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration-line:none">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">BigFix Compliance SCM Checklists:<br>
</span><span lang="EN" style="color:black"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration-line:none">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">We hope you find this latest release of SCM content
useful and effective. Thank you!</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">– The BigFix Compliance team</span></i></p></div>