Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
Unclassified ITSG for <strong>Windows</strong> <strong>Server</strong> <strong>2003</strong><br />
4.6.1.87 Secondary Logon<br />
"seclogon", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />
The Secondary Logon service allows users to create processes in different security contexts. The<br />
service is disabled.<br />
4.6.1.88 <strong>Security</strong> Accounts Manager<br />
"samss", 2,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />
The <strong>Security</strong> Accounts Manager service manages user and group account information. This<br />
policy sets the service to automatic startup.<br />
4.6.1.89 <strong>Server</strong><br />
"lanmanserver", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />
The <strong>Server</strong> service provides RPC, file, print, and Named pipe support over the network. This<br />
policy disables service startup.<br />
4.6.1.90 Shell Hardware Detection<br />
"shellhwdetection", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />
The Shell Hardware Detection service monitors and provides notification for AutoPlay hardware<br />
events. The service is disabled.<br />
4.6.1.91 Simple Mail Transport Protocol (SMTP)<br />
"smtpsvc", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />
The Simple Mail transfer Protocol (SMTP) service transports electronic mail across the network.<br />
The service is disabled.<br />
88 March 2004 <strong>Server</strong> Policy Files