Windows Server 2003 Recommended Baseline Security

Unclassified ITSG for Windows Server 2003
4.6.1.15 Cryptographic Services
"cryptsvc", 2,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRS
DRCWDWO;;;WD)"
Cryptographic Services provide key management functionality for the computer. This policy sets
the service to automatic startup.
4.6.1.16 DHCP Client
The DHCP Client service registers with DHCP and DNS servers in the domain.
4.6.1.16.1 Domain Member Baseline
"dhcp", 2,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRS
DRCWDWO;;;WD)"
This policy sets the service to automatic startup.
4.6.1.16.2 Workgroup Member Baseline
"dhcp", 4,
"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC
RSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRS
DRCWDWO;;;WD)"
This policy disables service startup.
4.6.1.17 DHCP Server
"dhcpserver", 4,
"D:(A;;CCLCSWLOCRRC;;;IU)(A;;GA;;;BA)(A;;GA;;;SY)S:(AU;FA;CCDCLCSWRPWPD
TLOCRSDRCWDWO;;;WD)"
The DHCP Server allocates IP addresses. The service is disabled.
4.6.1.18 Distributed File System
"dfs", 4,
"D:(A;;CCLCSWLOCRRC;;;IU)(A;;GA;;;BA)(A;;GA;;;SY)S:(AU;FA;CCDCLCSWRPWPD
TLOCRSDRCWDWO;;;WD)
The Distributed File System manages logical volumes across local or wide area networks. The
service is disabled.
74 March 2004 Server Policy Files