WN12-00-000210 - PowerShell script block logging must be enabled on Windows 2012/2012 R2 - Patch
WN12-AC-000001 - Windows 2012 account lockout duration must be configured to 15 minutes or greater.
Added
WN12-UR-000019-MS - The Deny log on as a service user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems. No other groups or accounts must be assigned this right.
Removed
WN12-UR-000019-MS - The Deny log on as a service user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems. No other groups or accounts must be assigned this right.
