Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
<strong>Windows</strong> <strong>Server</strong> <strong>2003</strong><br />
<strong>Recommended</strong> <strong>Baseline</strong> <strong>Security</strong> (ITSG-20)<br />
4.7.5.2 General Registry Access Controls<br />
Table 2 – General Registry Access Controls<br />
Hive/Key Name Audit Administrator &<br />
System<br />
Authenticated<br />
Users<br />
HKLM\Software S&F Full Control Read<br />
HKLM\Software\Classes\helpfile F Full Control Read<br />
HKLM\Software\Classes\.hlp F Full Control Read<br />
HKLM\Software\Microsoft\Command Processor S&F Full Control Read<br />
HKLM\Software\Microsoft\Cryptography S&F Full Control Read<br />
HKLM\Software\Microsoft\Driver Signing S&F Full Control Read<br />
HKLM\Software\Microsoft\EnterpriseCertificates S&F Full Control Read<br />
HKLM\Software\Microsoft\Non-DriverSigning S&F Full Control Read<br />
HKLM\Software\Microsoft\NetDDE S&F Full Control Read<br />
HKLM\Software\Microsoft\Ole F Full Control Read<br />
HKLM\Software\Microsoft\Rpc S&F Full Control Read<br />
HKLM\Software\Microsoft\Secure S&F Full Control Read<br />
HKLM\Software\Microsoft\SystemCertificates S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>\CurrentVersion\Run S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>\CurrentVersion\RunOnce S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\Aedebug S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\AsrCommands S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\Classes F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\Console F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\DiskQuota F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\Drivers32 S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\Font Drivers F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\FontMapper F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\Image File<br />
Execution Options<br />
S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\IniFileMapping S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\PerfLib S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\ProfileList S&F Full Control Read<br />
HKLM\Software\Microsoft\<strong>Windows</strong>NT\CurrentVersion\SecEdit S&F Full Control Read<br />
<strong>Server</strong> Policy Files March 2004 109
Change language