Windows Server 2003 Recommended Baseline Security

Unclassified ITSG for Windows Server 2003
4.6.1.67 Portable Media Serial Number
"wmdmpmsn", 4,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
The Portable Media Serial Number service retrieves serial numbers from any portable music
player connected to the system. The service is disabled.
4.6.1.68 Print Server for Macintosh
"macprint", 4,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
The Macintosh Print service provides network printer access to Macintosh computers. The
service is disabled.
4.6.1.69 Print Spooler
"spooler", 4,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
The Spooler service manages local and network print queues and controls all print jobs. The
service is disabled.
4.6.1.70 Protected Storage
"protectedstorage", 2,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
The Protected Storage service protects storage of sensitive information from unauthorized
services, processes or users. This policy sets the service to automatic startup.
4.6.1.71 Remote Access Auto Connection Manager
"rasauto", 4,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
The Remote Access Auto Connection Manager service detects unsuccessful attempts to a remote
network or computer. It then provides an alternative method for connection. The service is
disabled.
84 March 2004 Server Policy Files