Guide to Securing Microsoft Guide to Securing Microsoft Guide to …

Short Description
(GPOs) is addressed in the Guide to Securing Microsoft Windows 2000 Group … Users of this guide have a working knowledge of Windows 2000 installation and …

Website: nsa2.www.conxion.com | Filesize: 971kb

Content
UNCLASSIFIED
UNCLASSIFIED
Report Number: C4-052R-00
Guide to Securing Microsoft
Windows 2000? Group Policy:
Security Configuration Tool Set
Operational Network Evaluations Division
of the
Systems and Network Attack Center (SNAC)
National Security Agency
9800 Savage Rd. Suite 6704
Ft. Meade, MD 20755-6704
W2KGuides@nsa.gov
Author:
J. Haney
Updated: December 3, 2002
Version 1.2UNCLASSIFIED
ii UNCLASSIFIED
Change Control
Version Date Details
1.1 22 Jan. 2002 Added this change control section to track version modifications.
Chapt. 2, removed references to a “companion CD.”
Chapt. 2, renamed the section “Undoing Security Changes” to “Before
Making Security Changes” and moved the section to before the “Checklist
for Applying the Recommendations in this Guide” section. In this same
section changed “(described later)” to “(described in Chapter 10).”
Chapt. 3, Table 3, added the line “ENPASFLT.DLL is available to U.S.
government agencies only” under the “Passwords must meet complexity
requirements” table entry.
Chapt. 3 under the Account Lockout Policy section, changed “thousands of
well-known passwords are tried” to “thousands of words are tried.”
Chapt. 3, Table 5, changed “Maximum lifetime for user ticket removal” to
“Maximum lifetime for user ticket renewal.”
Chapt. 4, Table 7, added the “ENTERPRISE DOMAIN CONTROLLERS”
group to the “Access this computer from network” user right.
Chapt. 4, Table 8, under the table entry for “Allow Server Operators to
schedule tasks,” corrected the registry entry to be
HKLMSystemCurrentControlSetControlLsaSubmitControl= 0.
Chapt. 5,…