Security Options And Their Default Settings

Front 1

Default setting for security option: Additional restrictions for anonymous connections

Back 1

None. Rely on default permissions

Front 2

Default setting for security option:*Allow server operators to schedule tasks (domain controllers only)

Back 2

Not defined

Front 3

Default setting for security option:*Allow system to be shut down without having to log on

Back 3

Enabled

Front 4

Default setting for security option:*Allow to eject removable NTFS media

Back 4

Administrators

Front 5

Default setting for security option:Amount of idle time required before disconnecting sessions

Back 5

15 minutes

Front 6

Default setting for security option:*Audit the access of global system objects

Back 6

Disabled

Front 7

Default setting for security option:*Audit use of Backup and Restore privilege

Back 7

Disabled

Front 8

Default setting for security option:*Automatically log off users when logon time expires (local)

Back 8

Enabled

Front 9

Default setting for security option:*Clear virtual memory pagefile when system shuts down

Back 9

Disabled

Front 10

Default setting for security option:*Digitally sign client communication (always)

Back 10

Disabled

Front 11

Default setting for security option:*Digitally sign client communication (when possible)

Back 11

Enabled

Front 12

Default setting for security option:*Digitally sign server communication (always)

Back 12

Disabled

Front 13

Default setting for security option:*Digitally sign server communications (when possible)

Back 13

Disabled

Front 14

Default setting for security option:*Disable CTRL+ALT+DEL requirement for logon

Back 14

not defined

Front 15

Default setting for security option:*Do not display last user name in logon screen

Back 15

Disabled

Front 16

Default setting for security option:LAN Manager Authentication Level

Back 16

Send LAN Manager and NTLM responses

Front 17

Default setting for security option:Message text for users attempting to log on

Back 17

blank

Front 18

Default setting for security option:Message title for users attempting to log on

Back 18

blank

Front 19

Default setting for security option:Number of previous logons to cache (in case domain controller is not available)

Back 19

10 logons

Front 20

Default setting for security option: Prevent system maintenance of computer account password

Back 20

Disable

Front 21

Default setting for security option: Prevent users from installing printer drivers

Back 21

Disabled

Front 22

Default setting for security option: Prompt user to change password before expiration

Back 22

14 days

Front 23

Default setting for security option: Recovery Console: Allow automatic administrative logon

Back 23

Disabled

Front 24

Default setting for security option: Recovery Console: Allow floppy copy and access to all drives and all folders

Back 24

Disabled

Front 25

Default setting for security option: Rename administrator account

Back 25

Not defined

Front 26

Default setting for security option: Rename administrator account

Back 26

Not defined

Front 27

Default setting for security option: Rename guest account

Back 27

Not defined

Front 28

Default setting for security option: Restrict CD-ROM access to locally logged-on user only

Back 28

Disabled

Front 29

Default setting for security option: Restrict floppy access to locally logged-on user only

Back 29

Disabled

Front 30

Default setting for security option: Secure channel: Digitally encrypt or sign secure channel data (always)

Back 30

Disabled

Front 31

Default setting for security option: Secure channel: Digitally encrypt secure channel data (when possible)

Back 31

Enabled

Front 32

Default setting for security option: Secure channel: Digitally sign secure channel data (when possible)

Back 32

Enabled

Front 33

Default setting for security option: Secure Channel: Require strong (Windows 2000 or later) session key

Back 33

Disabled

Front 34

Default setting for security option: Send unencrypted password to connect to third-party SMB servers

Back 34

Disabled

Front 35

Default setting for security option: Shut down system immediately if unable to log security audits

Back 35

Disabled

Front 36

Default setting for security option: Smart card removal behavior

Back 36

No action

Front 37

Default setting for security option: Strengthen default permissions of global system objects (e.g. Symbolic Links)

Back 37

Enabled

Front 38

Default setting for security option: Unsigned driver installation behavior

Back 38

Not defined

Front 39

Default setting for security option: Unsigned non-driver installation behavior

Back 39

Not Defined

Front 40

Security option/Local Policy Options: Encrypt files in the Offline Folders has _________for Local setting and what for Effective Setting?

Back 40

Disabled for Local and Disabled for Effective setting