19.06.2014 Views

Windows Server 2003 Recommended Baseline Security

Windows Server 2003 Recommended Baseline Security

Windows Server 2003 Recommended Baseline Security

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Windows</strong> <strong>Server</strong> <strong>2003</strong><br />

<strong>Recommended</strong> <strong>Baseline</strong> <strong>Security</strong> (ITSG-20)<br />

The Internet Connection Firewall (ICF) / Internet Connection Sharing (ICS) service provides<br />

Internet services for small local networks. The service is disabled.<br />

4.6.1.40 Intersite Messaging<br />

"ismserv", 4,<br />

"D:(A;;CCLCSWLOCRRC;;;IU)(A;;GA;;;BA)(A;;GA;;;SY)S:(AU;FA;CCDCLCSWRPWPD<br />

TLOCRSDRCWDWO;;;WD)"<br />

The Intersite Messaging Service is used for mail-based replication. The service is disabled.<br />

4.6.1.41 IP Version 6 Helper Service<br />

"6to4", 4,<br />

"D:(A;;CCLCSWLOCRRC;;;IU)(A;;GA;;;BA)(A;;GA;;;SY)S:(AU;FA;CCDCLCSWRPWPD<br />

TLOCRSDRCWDWO;;;WD)"<br />

The IP Version 6 Helper Service offers IPV6 connectivity over existing IPV4 network. The<br />

service is disabled.<br />

4.6.1.42 IPSEC Policy Agent (IPSec Service)<br />

"policyagent", 2,<br />

"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />

RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />

The IPSEC Policy Agent (IPSec Service) provides encryption services to clients and servers on<br />

networks. This policy sets the service to automatic startup.<br />

4.6.1.43 Kerberos Key Distribution Centre<br />

"kdc", 4,<br />

"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />

RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />

The Kerberos Key Distribution Center Service allows user logon using Kerberos v5<br />

authentication protocol. The service is disabled.<br />

4.6.1.44 License Logging Service<br />

"licenseservice", 4,<br />

"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOC<br />

RSDRCWDWO;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"<br />

The License Logging service records client access licensing information. The service is disabled.<br />

<strong>Server</strong> Policy Files March 2004 79

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!