The system must be configured to queue error reports until a local or DOD-wide collector is available.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-57469	WN12-ER-000013	SV-71921r1_rule	ECSC-1	Medium

Description
Queueing error reports provides the ability for a system to collect reports locally or until a collection server can be contacted. Valuable system diagnostic and vulnerability information may be lost if the report queue is disabled.

STIG	Date
Windows Server 2012 / 2012 R2 Member Server Security Technical Implementation Guide	2014-12-18

Details

Check Text ( C-58359r1_chk )
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\ Value Name: DisableQueue Type: REG_DWORD Value: 0

Fix Text (F-62727r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Error Reporting -> Advanced Error Reporting Settings -> "Configure Report Queue" to "Enabled".