Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security
Windows Server 2003 Recommended Baseline Security
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
<strong>Windows</strong> <strong>Server</strong> <strong>2003</strong><br />
<strong>Recommended</strong> <strong>Baseline</strong> <strong>Security</strong> (ITSG-20)<br />
4.6.1 Services Explicitly Covered by Microsoft Guidance<br />
4.6.1.1 Alerter<br />
"alerter", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRS<br />
DRCWDWO;;;WD)"<br />
The Alerter service notifies selected users and computers of administrative alerts. This policy<br />
disables this service.<br />
4.6.1.2 Application Layer Gateway Service<br />
"alg", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRS<br />
DRCWDWO;;;WD)"<br />
The Application Layer Gateway Service is a subcomponent of the Internet Connection Sharing<br />
(ICS) / Internet Connection Firewall (ICF) Service. This supports independent software vendor<br />
plug-ins to allow proprietary protocols through the firewall and work behind ICS. This policy<br />
disables the service.<br />
4.6.1.3 Application Management<br />
"appmgmt", 4,<br />
"D:(A;;CCLCSWLOCRRC;;;IU)(A;;GA;;;BA)(A;;GA;;;SY)S:(AU;FA;CCDCLCSWRPWPD<br />
TLOCRSDRCWDWO;;;WD)"<br />
Application Management provides software installation services. This policy disables the<br />
service.<br />
4.6.1.4 ASP .NET State Service<br />
"aspnet_state", 4,<br />
"D:(A;;CCLCSWLOCRRC;;;IU)(A;;GA;;;BA)(A;;GA;;;SY)S:(AU;FA;CCDCLCSWRPWPD<br />
TLOCRSDRCWDWO;;;WD)"<br />
The ASP .NET State Service provides support for out-of-process session states for ASP .NET.<br />
This policy disables the service.<br />
4.6.1.5 Automatic Updates<br />
"wuauserv", 4,<br />
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />
RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />
<strong>Server</strong> Policy Files March 2004 71