Microsoft Windows Server 2019 Approval

The Bureau Windows Technical Support Team (BWTST) is pleased to announce the approval of Microsoft Windows Server 2019 for use as the new standard Windows Server OS for USGS. Administrators should open a ticket with the Service Desk to request a copy of the 2019 installation media. Additional information about Windows Server 2019 is available here.

In conjunction with this release, the following three GPOs will be linked to the regional OUs on June 24, 2019. Please read the descriptions of each carefully and contact BWTST via a Service Desk ticket if you have any questions.

1. DI – DOI Windows Server 2019 Computer Policy v.1.0
   
   This is the current DOI Server 2019 STIG, and is based on the DOI Server 2016 STIG. This STIG is provisional and some settings will likely change after DOI evaluates and incorporates the recently released DISA Server 2019 STIG settings. These changes will be communicated before they are put into production.

1. DI – USGS Windows Server 2016 Computer Policy v.2.0
   
   The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system. The DOI Windows Server 2016 STIG does not rename the built-in local administrator account; the setting to rename is configured for servers and clients by each DOI agency. To fulfill this requirement, this GPO was created to rename the built-in local administrator account from “Administrator” to “USGS_admin”. This is the only setting in this GPO. For sites that have already changed the built-in local Administrator account name, please be aware that the name will change to USGS_admin once the GPO settings are applied.
   
   
2. DI – USGS Windows Server 2019 Computer Policy v.1.0
   
   The built-in administrator account is a well-known account subject to attack. Renaming this account to an unidentified name improves the protection of this account and the system. The DOI Windows Server 2019 STIG does not rename the built-in local administrator account; the setting to rename is configured for servers and clients by each DOI agency. To fulfill this requirement, this GPO was created to rename the built-in local administrator account from “Administrator” to “USGS_admin”. This is the only setting in this GPO. For sites that have already changed the built-in local Administrator account name, please be aware that the name will change to USGS_admin once the GPO settings are applied.