Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security Windows Server 2003 Recommended Baseline Security
Unclassified ITSG for Windows Server 2003 MacSrv=0 The MacSrv value determines if the system will install Macintosh file services. The setting ‘0’ does not install Macintosh file services. Netcm=0 The Netcm value determines if the system will install Microsoft Connection Manager Administration Kit and Phone Book Service. The setting ‘0’ does not install this service. NetMonTools=0 The ‘NetMon Tools’ value determines if the system will install the network monitoring tools. The setting ‘0’ does not install the network monitoring tools. SimpTcp=0 The ‘SimpTcp’ value determines if the system will install simple TCP/IP protocol suites. The setting ‘0’ does not install the simple TCP/IP protocol suites. SNMP=0 The ‘SNMP’ value determines if the system will install Simple Network Management Protocol. The setting ‘0’ does not install the SNMP protocol. WINS=0 The ‘WINS’ value determines if the system will install Windows Internet Name Service. The setting ‘0’ does not install WINS. 3.2.1.9 [Components] AccessOpt=On The AccessOpt value sets the registry value accessopt. The setting ‘On’ installs the Accessibility wizard. appsrv_console=Off The appsrv_console sets the registry value appsrv_console. The setting ‘Off’ does not install the Application Server Console. 14 March 2004 Automated Installation
Windows Server 2003 Recommended Baseline Security (ITSG-20) aspnet=Off The aspnet value sets the aspnet registry value. The setting ‘Off’ does not install the ASP .NET development platform. AutoUpdate=Off The AutoUpdate value sets the autoupdate registry value. The setting ‘Off’ does not install AutoUpdate. BitsServerExtensionsISAPI=Off The BitsServerExtensionsISAPI sets the bitsserverextensionsisapi registry value. The setting ‘Off’ does not install ISAPI for BITS server extensions. BitsServerExtensionManager=Off The BitsServerExtensionManager sets the bitsserverextensionmanager registry key. The setting ‘Off’ does not install the MMC snap-in, administrative APIs and ADSI extensions for BITS. Calc=On The Calc value sets the registry value calc. The setting ‘Off’ does not install the Calculator feature. certsrv=On The certsrv value sets the certsrv registry value. The setting ‘On’ installs the Certificate Services components. certsrv_client=Off The certsrv_client value sets the certsrv_client registry value. The setting ‘Off’ does not install the Web client components of Certificate Services. This requires a Certification Authority to be defined with the CAName parameter. This also requires a computer system hosting the Certification Authority be defined with the CAMachine parameter. These entries support the use of a certificate in a web browser. Automated Installation March 2004 15
- Page 1 and 2: IT Security Guidance Windows Server
- Page 3 and 4: Windows Server 2003 Recommended Bas
- Page 5 and 6: Windows Server 2003 Recommended Bas
- Page 7 and 8: Windows Server 2003 Recommended Bas
- Page 9 and 10: Windows Server 2003 Recommended Bas
- Page 11 and 12: Windows Server 2003 Recommended Bas
- Page 13 and 14: Windows Server 2003 Recommended Bas
- Page 15: Windows Server 2003 Recommended Bas
- Page 18 and 19: Windows Server 2003 Recommended Bas
- Page 20 and 21: Windows Server 2003 Recommended Bas
- Page 22 and 23: Windows Server 2003 Recommended Bas
- Page 24 and 25: Windows Server 2003 Recommended Bas
- Page 26 and 27: Windows Server 2003 Recommended Bas
- Page 28 and 29: Unclassified ITSG for Windows Serve
- Page 30 and 31: Unclassified ITSG for Windows Serve
- Page 32 and 33: Unclassified ITSG for Windows Serve
- Page 36 and 37: Unclassified ITSG for Windows Serve
- Page 38 and 39: Unclassified ITSG for Windows Serve
- Page 40 and 41: Unclassified ITSG for Windows Serve
- Page 42 and 43: Unclassified ITSG for Windows Serve
- Page 44 and 45: Unclassified ITSG for Windows Serve
- Page 46 and 47: Unclassified ITSG for Windows Serve
- Page 48 and 49: Unclassified ITSG for Windows Serve
- Page 50 and 51: Unclassified ITSG for Windows Serve
- Page 52 and 53: Unclassified ITSG for Windows Serve
- Page 54 and 55: Unclassified ITSG for Windows Serve
- Page 56 and 57: Unclassified ITSG for Windows Serve
- Page 58 and 59: Unclassified ITSG for Windows Serve
- Page 60 and 61: Unclassified ITSG for Windows Serve
- Page 62 and 63: Unclassified ITSG for Windows Serve
- Page 64 and 65: Unclassified ITSG for Windows Serve
- Page 66 and 67: Unclassified ITSG for Windows Serve
- Page 68 and 69: Unclassified ITSG for Windows Serve
- Page 70 and 71: Unclassified ITSG for Windows Serve
- Page 72 and 73: Unclassified ITSG for Windows Serve
- Page 74 and 75: Unclassified ITSG for Windows Serve
- Page 76 and 77: Unclassified ITSG for Windows Serve
- Page 78 and 79: Unclassified ITSG for Windows Serve
- Page 80 and 81: Unclassified ITSG for Windows Serve
- Page 82 and 83: Unclassified ITSG for Windows Serve
<strong>Windows</strong> <strong>Server</strong> <strong>2003</strong><br />
<strong>Recommended</strong> <strong>Baseline</strong> <strong>Security</strong> (ITSG-20)<br />
aspnet=Off<br />
The aspnet value sets the aspnet registry value. The setting ‘Off’ does not install the ASP .NET<br />
development platform.<br />
AutoUpdate=Off<br />
The AutoUpdate value sets the autoupdate registry value. The setting ‘Off’ does not install<br />
AutoUpdate.<br />
Bits<strong>Server</strong>ExtensionsISAPI=Off<br />
The Bits<strong>Server</strong>ExtensionsISAPI sets the bitsserverextensionsisapi registry value. The setting<br />
‘Off’ does not install ISAPI for BITS server extensions.<br />
Bits<strong>Server</strong>ExtensionManager=Off<br />
The Bits<strong>Server</strong>ExtensionManager sets the bitsserverextensionmanager registry key. The setting<br />
‘Off’ does not install the MMC snap-in, administrative APIs and ADSI extensions for BITS.<br />
Calc=On<br />
The Calc value sets the registry value calc. The setting ‘Off’ does not install the Calculator<br />
feature.<br />
certsrv=On<br />
The certsrv value sets the certsrv registry value. The setting ‘On’ installs the Certificate Services<br />
components.<br />
certsrv_client=Off<br />
The certsrv_client value sets the certsrv_client registry value. The setting ‘Off’ does not install<br />
the Web client components of Certificate Services. This requires a Certification Authority to be<br />
defined with the CAName parameter. This also requires a computer system hosting the<br />
Certification Authority be defined with the CAMachine parameter. These entries support the use<br />
of a certificate in a web browser.<br />
Automated Installation March 2004 15
Change language