Windows Server 2003 Recommended Baseline Security

Windows Server 2003
Recommended Baseline Security (ITSG-20)
4.7.6 Variance from Microsoft Guidance
The following table provides a list of settings that differ between the CSE guidance and
Microsoft guidance. The parameter is identified along with the CSE value and Microsoft value.
Table 3 – Variance from Microsoft Member Server Baseline
# Parameter CSE Value Microsoft Value
1 Minimum Password Length 8 12
2 Audit Policy Change Success/Fail Success
3 Audit System Events Success/Fail Success
4 Add Workstations to Domain None Administrators
5 Backup Files and Directories Backup Operators and
Administrators
6 Bypass Traverse Checking Users, Backup
Operators,Administrators and
Authenticated Users
Default
Default
7 Create a Pagefile Administrators Default
8 Create a Token Object None Default
9 Create Global Objects Service and Administrators Default
10 Create Permanent Shared Objects None Default
11 Deny Logon as a Service Guests, Anonymous Logon,
Administrators, Built-in
Administrator,
Support_388945a0 and Guest
12 Deny Logon Locally Guests, Anonymous Logon,
Built-in Administrator,
Support_388945a0 and Guest
Default
Default
13 Force shutdown from remote
system
None
Administrators
14 Lock Pages in Memory None Administrators
15 Logon as a Service Network Service and Local
Service
Default
16 Administrator Account Status Disabled Enabled
17 Interactive logon: Message text for
users attempting to logon
18 Interactive logon: Message title for
users attempting to log on
19 Interactive Logon: Require Smart
Card
Departmental entry
required
Departmental entry
required
Do not require smart card
“This system is restricted….”
“IT IS AN OFFENSE….”
Default
Server Policy Files March 2004 111