Predefined CCS Technical standards "CIS Microsoft Windows Server 2012 R2 v2.2.0" and "CIS Microsoft Windows Server 2012 R2 v2.2.1" have issue with following checks:
I have provided more details about the issues and few ways to fix them in the attached Word document. Due to considerable amount of screen shots and table data from evidence, it was easier for me to put that into Word document than creating all that content here. You will also find attached standard with fixed checks in the download section https://www.symantec.com/connect/downloads/fixed-checks-cis-microsoft-windows-server-2012-r2-v220v221
The issue were confirmed by the Symantec CCS support personnel and they are working on fixes that will probably be included in next SCU.
DISCLAIMER: Information here is provided AS IS without warranty of any kind, do not use them in production environment without proper testing.