Back

Configure the settings of the system registry and the systems objects (for Windows OS only).


CONTROL ID
01781
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Establish, implement, and maintain system hardening procedures., CC ID: 12001

This Control has the following implementation support Control(s):
  • Configure ICMP timestamp request responses properly., CC ID: 05150
  • Configure the Administrators group as the default owner for all new objects., CC ID: 01782
  • Configure the "System objects: Require case-insensitivity for non-Windows systems" setting., CC ID: 01783
  • Configure the "System objects: Strengthen default permissions of internal system objects" setting., CC ID: 01784
  • Configure the system to suppress Dr. Watson Crash dumps., CC ID: 01785
  • Disable automatic execution of the system debugger., CC ID: 01786
  • Disable automatic logon., CC ID: 01788
  • Disable automatic reboots after a Blue Screen of Death., CC ID: 01789
  • Remove administrative shares on workstations., CC ID: 01791
  • Configure the system to protect against Browser Spoofing attacks., CC ID: 01792
  • Configure the system to protect against source-routing spoofing., CC ID: 01793
  • Configure the system to protect the default gateway network setting., CC ID: 01794
  • Configure the system to ensure ICMP routing via the shortest path first., CC ID: 01795
  • Configure the system to protect against packet fragmentation., CC ID: 01796
  • Configure the keep-alive times., CC ID: 01797
  • Configure the system to protect against malicious Name-Release Attacks., CC ID: 01798
  • Disable Internet Router Discovery Protocol., CC ID: 01799
  • Configure the system to protect against SYN Flood attacks., CC ID: 01800
  • Enable Internet Protocol Security to protect Kerberos RSVP communication., CC ID: 01803
  • Configure the system to hide workstations from the network browser listing., CC ID: 01804
  • Enable the safe DSS search mode., CC ID: 01805
  • Disable WebDAV basic authentication (sp 2 only)., CC ID: 01806
  • Disable basic authentication over a clear channel (sp 2 only)., CC ID: 01807
  • Enable the usb block storage device policy (sp 2 only)., CC ID: 01808
  • Block the Distributed Transaction Coordinator service and set additional Distributed Transaction Coordinator parameters, if necessary., CC ID: 01809
  • Set the registry permission for HKLM\Software\Classes., CC ID: 02010
  • Set the registry permission for HKLM\Software., CC ID: 02011
  • Set the registry permission for HKLM\Software\Microsoft\NetDDE., CC ID: 02012
  • Set the registry permission for HKLM\Software\Microsoft\OS/2 Subsystem for NT., CC ID: 02013
  • Set the registry permission for HKLM\Software\Microsoft\Windows NT\CurrentVersion\AsrCommands., CC ID: 02014
  • Set the registry permission for HKLM\Software\Microsoft\Windows NT\CurrentVersion\Perflib., CC ID: 02015
  • Set the registry permission for HKLM\Software\Microsoft\Windows\CurrentVersion\Group Policy., CC ID: 02016
  • Set the registry permission for HKLM\Software\Microsoft\Windows\CurrentVersion\Installer., CC ID: 02017
  • Set the registry permission for HKLM\Software\Microsoft\Windows\CurrentVersion\Policies., CC ID: 02018
  • Set the registry permission for HKLM\System., CC ID: 02019
  • Set the registry permission for HKLM\System\Clone., CC ID: 02020
  • Set the registry permission for HKLM\System\ControlSet001., CC ID: 02021
  • Set the registry permission for HKLM\System\ControlSet00x., CC ID: 02022
  • Set the registry permission for HKLM\System\CurrentControlSet\Control\SecurePipeServers\WinReg., CC ID: 02023
  • Set the registry permission for HKLM\System\CurrentControlSet\Control\WMI\Security., CC ID: 02024
  • Set the registry permission for HKLM\System\CurrentControlSet\Enum., CC ID: 02025
  • Set the registry permission for HKLM\System\CurrentControlSet\Hardware Profiles., CC ID: 02026
  • Set the registry permission for HKLM\System\CurrentControlSet\Services\SNMP\Parameters\PermittedManagers., CC ID: 02027
  • Set the registry permission for HKLM\System\CurrentControlSet\Services\SNMP\Parameters\ValidCommunities., CC ID: 02028
  • Set the registry permission for HKU\.Default., CC ID: 02029
  • Set the registry permission for HKU\.Default\Software\Microsoft\NetDDE., CC ID: 02030
  • Set the registry permission for HKU\.Default\Software\Microsoft\Protected Storage System Provider., CC ID: 02031
  • Set the registry permission for %SystemDrive%., CC ID: 02032
  • Enable auditing for HKLM\Software and set its registry permission., CC ID: 02033
  • Enable auditing for HKLM\System and set its registry permission., CC ID: 02034
  • Configure the system to a set number of unacknowledged data retransmissions., CC ID: 04271
  • Configure the system to remap folder types to Notepad., CC ID: 04312
  • Configure the system to show hidden file types., CC ID: 04313
  • Configure the "Do not process the legacy run list" setting., CC ID: 04322
  • Configure the "Do not process the run once list" setting., CC ID: 04323
  • Configure "Registry policy processing" to organizational standards., CC ID: 04324
  • Configure the "Restrict Terminal Server users to a single remote session" setting to organizational standards., CC ID: 04510
  • Configure the "Do not use temporary folders per session" setting to organizational standards., CC ID: 04513
  • Configure the "Do not delete temp folder upon exit" setting to organizational standards., CC ID: 04514
  • Configure the "Turn off background refresh of Group Policy" setting to organizational standards., CC ID: 04520
  • Configure the "Configure Windows NTP Client" setting., CC ID: 04522
  • Configure the "Disallow installation of printers using kernel-mode drivers" setting to organizational standards., CC ID: 04523
  • Configure the "Prevent codec download" setting to organizational standards., CC ID: 04524
  • Verify the Posix registry key does not exist., CC ID: 04525
  • Configure the Recycle Bin to delete files on assets running Windows Server 2003., CC ID: 04526
  • Configure the system to allow only administrators with permissions to change the security settings of Distributed Component Object Model objects., CC ID: 04529
  • Configure the system to allow Distributed Component Object Model calls to be executed only under the calling user's security context., CC ID: 04530
  • Configure the version string reported by the bind service properly., CC ID: 05140
  • Enable or disable performing source validation by reverse path, as appropriate., CC ID: 05141
  • Verify the environment variable "Os2LibPath" exists, as appropriate., CC ID: 05142
  • Define the path to the Microsoft OS/2 version 1.x library properly., CC ID: 05143
  • Set the "Specify intranet Microsoft update service location" properly., CC ID: 05144
  • Set the path to the debugger used for Just-In-Time debugging properly., CC ID: 05145
  • Set the OS/2 Subsystem location properly., CC ID: 05146
  • Configure extended TCP reserved ports properly., CC ID: 05147
  • Enable or disable ICMPv4 redirects, as appropriate., CC ID: 05148
  • Enable or disable ICMPv6 redirects, as appropriate., CC ID: 05149
  • Configure ICMP timestamp broadcast request responses properly., CC ID: 05151
  • Configure Internet Control Message Protocol echo (ping) request responses properly., CC ID: 05152
  • Configure ICMP netmask request responses properly., CC ID: 05153
  • Set the registry permission for HKEY_CLASSES_ROOT properly., CC ID: 05154
  • Set the registry key HKLM\System\CurrentControlSet\Control\Session Manager\SubSystems\Os2 properly., CC ID: 05155
  • Set the registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDebug\Debugger properly., CC ID: 05156
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Regfile\Shell\Open\Command properly., CC ID: 05157
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography properly., CC ID: 05158
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.hlp properly., CC ID: 05159
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Classes\helpfile properly., CC ID: 05160
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing properly., CC ID: 05161
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Calais properly., CC ID: 05162
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell properly., CC ID: 05163
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony properly., CC ID: 05164
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Reliability properly., CC ID: 05165
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell properly., CC ID: 05166
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion properly., CC ID: 05167
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech properly., CC ID: 05168
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC properly., CC ID: 05169
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EventSystem properly., CC ID: 05170
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates properly., CC ID: 05171
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports properly., CC ID: 05172
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Driver Signing properly., CC ID: 05173
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Policies properly., CC ID: 05174
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Command Processor properly., CC ID: 05175
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ads\Providers\WinNT properly., CC ID: 05176
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADs\Providers\NWCOMPAT properly., CC ID: 05177
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADs\Providers\NDS properly., CC ID: 05178
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ADs\Providers\LDAP\Extensions properly., CC ID: 05179
  • Set the registry permission for HKEY_USERS\.DEFAULT\Software\Microsoft\SystemCertificates\Root\ProtectedRoots properly., CC ID: 05180
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager properly., CC ID: 05181
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Help properly., CC ID: 05182
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip properly., CC ID: 05183
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Non-Driver Signing properly., CC ID: 05184
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DeviceManager properly., CC ID: 05185
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ClipSrv\Security properly., CC ID: 05186
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP properly., CC ID: 05187
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceCurrent properly., CC ID: 05188
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog\Security properly., CC ID: 05189
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMI\Security properly., CC ID: 05190
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Security properly., CC ID: 05191
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TapiSrv\Security properly., CC ID: 05192
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCardSvr\Security properly., CC ID: 05193
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Samss\Security properly., CC ID: 05194
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcSs\Security properly., CC ID: 05195
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDEdsdm\Security properly., CC ID: 05196
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility properly., CC ID: 05197
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kdc\Security properly., CC ID: 05198
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AppMgmt\Security properly., CC ID: 05199
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services properly., CC ID: 05200
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers properly., CC ID: 05201
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network properly., CC ID: 05202
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\LSA\Data properly., CC ID: 05203
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\GBG properly., CC ID: 05204
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Skew1 properly., CC ID: 05205
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\JD properly., CC ID: 05206
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control properly., CC ID: 05207
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\wbem properly., CC ID: 05208
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetDDE\Security properly., CC ID: 05209
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Font properly., CC ID: 05210
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EventLog properly., CC ID: 05211
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Shares properly., CC ID: 05212
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Windows 3.1 Migration Status properly., CC ID: 05213
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Secure properly., CC ID: 05214
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Program Groups properly., CC ID: 05215
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon properly., CC ID: 05216
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones properly., CC ID: 05217
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping properly., CC ID: 05218
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UPS properly., CC ID: 05219
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper properly., CC ID: 05220
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Compatibility properly., CC ID: 05221
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AEDebug properly., CC ID: 05222
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx properly., CC ID: 05223
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce properly., CC ID: 05224
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run properly., CC ID: 05225
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows properly., CC ID: 05226
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Secure properly., CC ID: 05227
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RPC properly., CC ID: 05228
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options properly., CC ID: 05229
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole properly., CC ID: 05230
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ProductOptions properly., CC ID: 05231
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout properly., CC ID: 05232
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ContentIndex properly., CC ID: 05233
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName properly., CC ID: 05234
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy properly., CC ID: 05235
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Schedule properly., CC ID: 05236
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost properly., CC ID: 05237
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SecEdit properly., CC ID: 05238
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList properly., CC ID: 05239
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS properly., CC ID: 05240
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32 properly., CC ID: 05241
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Classes properly., CC ID: 05242
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion properly., CC ID: 05243
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates properly., CC ID: 05244
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows properly., CC ID: 05245
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole properly., CC ID: 05246
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Printers properly., CC ID: 05247
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies properly., CC ID: 05248
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSDTC\Security\XAKey properly., CC ID: 05249
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\UPnP Device Host properly., CC ID: 05250
  • Set the registry permission for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ratings properly., CC ID: 05251
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class properly., CC ID: 05252
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc\Security properly., CC ID: 05253
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNSCache properly., CC ID: 05254
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Ersvc\Security properly., CC ID: 05255
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IRENUM\Security properly., CC ID: 05256
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt properly., CC ID: 05257
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteAccess properly., CC ID: 05259
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Scarddrv\Security properly., CC ID: 05260
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Stisvc\Security properly., CC ID: 05261
  • Set the registry permission for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysmonLog\Log Queries properly., CC ID: 05262
  • Configure the "audit the %SystemDrive% directory" setting to organizational standards., CC ID: 10099
  • Configure the "audit the HKEY_LOCAL_MACHINESOFTWARE registry key" setting to organizational standards., CC ID: 10100
  • Configure the "audit the HKEY_LOCAL_MACHINESYSTEM registry key" setting to organizational standards., CC ID: 10101
  • Configure the "%ProgramFiles%" directory permissions to organizational standards., CC ID: 10102
  • Configure the "%ProgramFiles%Resource Kit" directory permissions to organizational standards., CC ID: 10103
  • Configure the "%ProgramFiles%Resource Pro Kit" directory permissions to organizational standards., CC ID: 10104
  • Configure the "%SystemDrive%" directory permissions to organizational standards., CC ID: 10105
  • Configure the "%SystemDrive%AUTOEXEC.BAT" file permissions to organizational standards., CC ID: 10106
  • Configure the "%SystemDrive%BOOT.INI" file permissions to organizational standards., CC ID: 10107
  • Configure the "%SystemDrive%CONFIG.SYS" file permissions to organizational standards., CC ID: 10108
  • Configure the "%SystemDrive%Documents and Settings" file permissions to organizational standards., CC ID: 10109
  • Configure the "%SystemDrive%Documents and SettingsAdministrator" directory permissions to organizational standards., CC ID: 10110
  • Configure the "%SystemDrive%Documents and SettingsAll Users" directory permissions to organizational standards., CC ID: 10111
  • Configure the "%SystemDrive%Documents and SettingsAll UsersDocumentsDrWatson" directory permissions to organizational standards., CC ID: 10112
  • Configure the "%SystemDrive%Documents and SettingsAll UsersDocumentsDrWatsondrwtsn32.log" file permissions to organizational standards., CC ID: 10113
  • Configure the "%SystemDrive%Documents and SettingsDefault User" directory permissions to organizational standards., CC ID: 10114
  • Configure the "%SystemDrive%IO.SYS" file permissions to organizational standards., CC ID: 10115
  • Configure the "%SystemDrive%MSDOS.SYS" file permissions to organizational standards., CC ID: 10116
  • Configure the "%SystemDrive%NTBOOTDD.SYS" file permissions to organizational standards., CC ID: 10117
  • Configure the "%SystemDrive%NTDETECT.COM" file permissions to organizational standards., CC ID: 10118
  • Configure the "%SystemDrive%NTLDR" file permissions to organizational standards., CC ID: 10119
  • Configure the "%SystemDrive%Temp" directory permissions to organizational standards., CC ID: 10120
  • Configure the "%SystemDrive%My Download Files" directory permissions to organizational standards., CC ID: 10121
  • Configure the "%SystemDrive%System Volume Information" file permissions to organizational standards., CC ID: 10122
  • Configure the "%SystemRoot%" directory permissions to organizational standards., CC ID: 10123
  • Configure the "%SystemRoot%Driver CacheI386Driver.cab" directory permissions to organizational standards., CC ID: 10124
  • Configure the "%SystemRoot%$NtServicePackUninstall$" directory permissions to organizational standards., CC ID: 10125
  • Configure the "%SystemRoot%$NtServicePackUninstall$" directory permissions to organizational standards., CC ID: 10126
  • Configure the "%SystemRoot%$NtUninstall*" directories permissions to organizational standards., CC ID: 10127
  • Configure the "%SystemRoot%CSC" directory permissions to organizational standards., CC ID: 10128
  • Configure the "%SystemRoot%Debug" directory permissions to organizational standards., CC ID: 10129
  • Configure the "%SystemRoot%DebugUserMode" directory permissions to organizational standards., CC ID: 10130
  • Configure the "%SystemRoot% egedit.exe" file permissions to organizational standards., CC ID: 10131
  • Configure the "%SystemDrive%NTDS" directory permissions to organizational standards., CC ID: 10132
  • Configure the "%SystemRoot%Offline Web Pages" directory permissions to organizational standards., CC ID: 10133
  • Configure the "%SystemRoot%Registration" directory permissions to organizational standards., CC ID: 10134
  • Configure the "%SystemRoot% epair" directory permissions to organizational standards., CC ID: 10135
  • Configure the "%SystemRoot%security" directory permissions to organizational standards., CC ID: 10136
  • Configure the "%SystemRoot%SYSVOL" directory permissions to organizational standards., CC ID: 10137
  • Configure the "%SystemRoot%SYSVOLdomainPolicies" directory permissions to organizational standards., CC ID: 10138
  • Configure the "%SystemRoot%Temp" directory permissions to organizational standards., CC ID: 10139
  • Configure the "%SystemRoot%System32" directory permissions to organizational standards., CC ID: 10140
  • Configure the "%SystemRoot%System32arp.exe" directory permissions to organizational standards., CC ID: 10141
  • Configure the "%SystemRoot%System32at.exe" file permissions to organizational standards., CC ID: 10142
  • Configure the "%SystemRoot%System32CONFIG" file permissions to organizational standards., CC ID: 10143
  • Configure the "%SystemRoot%System32CONFIGAppEvent.evt" file permissions to organizational standards., CC ID: 10144
  • Configure the "%SystemRoot%System32CONFIG*.evt" file permissions to organizational standards., CC ID: 10145
  • Configure the "%SystemRoot%System32dllcache" directory permissions to organizational standards., CC ID: 10146
  • Configure the "%SystemRoot%System32DTCLog" directory permissions to organizational standards., CC ID: 10147
  • Configure the "%SystemRoot%System32GroupPolicy" directory permissions to organizational standards., CC ID: 10148
  • Configure the "%SystemRoot%System32ias" directory permissions to organizational standards., CC ID: 10149
  • Configure the "%SystemRoot%System32Ntbackup.exe" file permissions to organizational standards., CC ID: 10150
  • Configure the "%SystemRoot%System32NTMSData" directory permissions to organizational standards., CC ID: 10151
  • Configure the "%SystemRoot%System32Rcp.exe" file permissions to organizational standards., CC ID: 10152
  • Configure the "%SystemRoot%System32Regedt32.exe" file permissions to organizational standards., CC ID: 10153
  • Configure the "%SystemRoot%system32ReinstallBackups" directory permissions to organizational standards., CC ID: 10154
  • Configure the "%SystemRoot%System32Rexec.exe" file permissions to organizational standards., CC ID: 10155
  • Configure the "%SystemRoot%System32Rsh.exe" file permissions to organizational standards., CC ID: 10156
  • Configure the "%SystemRoot%System32Secedit.exe" file permissions to organizational standards., CC ID: 10157
  • Configure the "%SystemRoot%System32Setup" directory permissions to organizational standards., CC ID: 10158
  • Configure the "%SystemRoot%System32 epl" directory permissions to organizational standards., CC ID: 10159
  • Configure the "%SystemRoot%System32 eplexport" directory permissions to organizational standards., CC ID: 10160
  • Configure the "%SystemRoot%System32 eplimport" directory permissions to organizational standards., CC ID: 10161
  • Configure the "%SystemRoot%System32spoolPrinters" directory permissions to organizational standards., CC ID: 10162
  • Configure the "%SystemRoot%Tasks" directory permissions to organizational standards., CC ID: 10163
  • Configure the "%ALL%Program FilesMQSeries" directory permissions to organizational standards., CC ID: 10164
  • Configure the "%ALL%Program FilesMQSeriesqmggr" directory permissions to organizational standards., CC ID: 10165
  • Configure the "%SystemDrive%Documents and SettingsAll UsersApplication DataMicrosoftHTML Help ACL" directory permissions to organizational standards., CC ID: 10166
  • Configure the "%SystemDrive%WINNTSECURITYDatabaseSECEDIT.SDB ACL" directory permissions to organizational standards., CC ID: 10167
  • Configure the "HKEY_CLASSES_ROOT" registry key permissions to organizational standards., CC ID: 10168
  • Configure the "HKEY_LOCAL_MACHINESOFTWARE" registry key permissions to organizational standards., CC ID: 10169
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREClasses" registry key permissions to organizational standards., CC ID: 10170
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREClassesRegfileShellOpenCommand" registry key permissions to organizational standards., CC ID: 10171
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftNetDDE" registry key permissions to organizational standards., CC ID: 10172
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftOS/2 Subsystem for NT" registry key permissions to organizational standards., CC ID: 10173
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionAsrCommands" registry key permissions to organizational standards., CC ID: 10174
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionPerflib" registry key permissions to organizational standards., CC ID: 10175
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionGroup Policy" registry key permissions to organizational standards., CC ID: 10176
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionInstaller" registry key permissions to organizational standards., CC ID: 10177
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPolicies" registry key permissions to organizational standards., CC ID: 10178
  • Configure the "HKEY_LOCAL_MACHINESYSTEM" registry key permissions to organizational standards., CC ID: 10179
  • Configure the "HKEY_LOCAL_MACHINESYSTEMclone" registry key permissions to organizational standards., CC ID: 10180
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset001" registry key permissions to organizational standards., CC ID: 10181
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset002" registry key permissions to organizational standards., CC ID: 10182
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset003" registry key permissions to organizational standards., CC ID: 10183
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset004" registry key permissions to organizational standards., CC ID: 10184
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset005" registry key permissions to organizational standards., CC ID: 10185
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset006" registry key permissions to organizational standards., CC ID: 10186
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset007" registry key permissions to organizational standards., CC ID: 10187
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset008" registry key permissions to organizational standards., CC ID: 10188
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset009" registry key permissions to organizational standards., CC ID: 10189
  • Configure the "HKEY_LOCAL_MACHINESYSTEMcontrolset010" registry key permissions to organizational standards., CC ID: 10190
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurePipeServerswinreg" registry key permissions to organizational standards., CC ID: 10191
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlWmiSecurity" registry key permissions to organizational standards., CC ID: 10192
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetEnum" registry key permissions to organizational standards., CC ID: 10193
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetHardware Profiles" registry key permissions to organizational standards., CC ID: 10194
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSNMPParametersPermittedManagers" registry key permissions to organizational standards., CC ID: 10195
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSNMPParametersValidCommunities" registry key permissions to organizational standards., CC ID: 10196
  • Configure the "HKEY_USERS.DEFAULT " registry key permissions to organizational standards., CC ID: 10197
  • Configure the "HKEY_USERS.DEFAULTSoftwareMicrosoftNetDDE" registry key permissions to organizational standards., CC ID: 10198
  • Configure the "HKEY_USERS.DEFAULTSoftwareMicrosoftProtected Storage System Provider" registry key permissions to organizational standards., CC ID: 10199
  • Configure the "HKEY_CLASSES_ROOT" registry key permissions to organizational standards., CC ID: 10200
  • Configure the "%SystemRoot%System32 unas.exe" file permissions to organizational standards., CC ID: 10222
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionAEDebugDebugger" registry key to organizational standards., CC ID: 10233
  • Configure the "%SystemDrive%perflogs" directory permissions to organizational standards., CC ID: 10266
  • Configure the "%SystemDrive%i386" directory permissions to organizational standards., CC ID: 10267
  • Configure the "%ProgramFiles%Common FilesSpeechEnginesTTS" directory permissions to organizational standards., CC ID: 10268
  • Configure the "%SystemRoot%\_default.plf" file permissions to organizational standards., CC ID: 10269
  • Configure the "%SystemRoot%addins" directory permissions to organizational standards., CC ID: 10270
  • Configure the "%SystemRoot%appPatch" directory permissions to organizational standards., CC ID: 10271
  • Configure the "%SystemRoot%clock.avi" file permissions to organizational standards., CC ID: 10272
  • Configure the "%SystemRoot%Connection Wizard" directory permissions to organizational standards., CC ID: 10273
  • Configure the "%SystemRoot%Driver Cache" file permissions to organizational standards., CC ID: 10274
  • Configure the "%SystemRoot%explorer.scf" file permissions to organizational standards., CC ID: 10275
  • Configure the "%SystemRoot%explorer.exe" file permissions to organizational standards., CC ID: 10276
  • Configure the "%SystemRoot%Help" directory permissions to organizational standards., CC ID: 10277
  • Configure the "%SystemRoot%infunregmp2.exe" file permissions to organizational standards., CC ID: 10278
  • Configure the "%SystemRoot%Java" directory permissions to organizational standards., CC ID: 10279
  • Configure the "%SystemRoot%mib.bin" file permissions to organizational standards., CC ID: 10280
  • Configure the "%SystemRoot%msagent" directory permissions to organizational standards., CC ID: 10281
  • Configure the "%SystemRoot%msdfmap.ini" file permissions to organizational standards., CC ID: 10282
  • Configure the "%SystemRoot%mui" directory permissions to organizational standards., CC ID: 10283
  • Configure the "%SystemRoot%security emplates" directory permissions to organizational standards., CC ID: 10284
  • Configure the "%SystemRoot%speech" directory permissions to organizational standards., CC ID: 10285
  • Configure the "%SystemRoot%system.ini" file permissions to organizational standards., CC ID: 10286
  • Configure the "%SystemRoot%systemsetup.inf" file permissions to organizational standards., CC ID: 10287
  • Configure the "%SystemRoot%systemstdole.tlb" file permissions to organizational standards., CC ID: 10288
  • Configure the "%SystemRoot% wain_32" directory permissions to organizational standards., CC ID: 10289
  • Configure the "%SystemRoot%System32cacls.exe" directory permissions to organizational standards., CC ID: 10290
  • Configure the "%SystemRoot%System32attrib.exe" directory permissions to organizational standards., CC ID: 10291
  • Configure the "%SystemRoot%System32CatRoot" directory permissions to organizational standards., CC ID: 10292
  • Configure the "%SystemRoot%System32configsystemprofile" directory permissions to organizational standards., CC ID: 10293
  • Configure the "%SystemRoot%System32debug.exe" file permissions to organizational standards., CC ID: 10294
  • Configure the "%SystemRoot%System32dhcp" directory permissions to organizational standards., CC ID: 10295
  • Configure the "%SystemRoot%System32drivers" directory permissions to organizational standards., CC ID: 10296
  • Configure the "%SystemRoot%System32eventtriggers.exe" file permissions to organizational standards., CC ID: 10297
  • Configure the "%SystemRoot%System32edlin.exe" file permissions to organizational standards., CC ID: 10298
  • Configure the "%SystemRoot%System32eventcreate.exe" file permissions to organizational standards., CC ID: 10299
  • Configure the "%SystemRoot%System32Export" directory permissions to organizational standards., CC ID: 10300
  • Configure the "%SystemRoot%System32ipconfig.exe" file permissions to organizational standards., CC ID: 10301
  • Configure the "%SystemRoot%System32\nslookup.exe" file permissions to organizational standards, CC ID: 10302
  • Configure the "%SystemRoot%System32 etstat.exe" file permissions to organizational standards., CC ID: 10303
  • Configure the "%SystemRoot%System32 btstat.exe" file permissions to organizational standards., CC ID: 10304
  • Configure the "%SystemRoot%System32ftp.exe" file permissions to organizational standards., CC ID: 10305
  • Configure the "%SystemRoot%System32LogFiles" directory permissions to organizational standards., CC ID: 10306
  • Configure the "%SystemRoot%System32mshta.exe" file permissions to organizational standards., CC ID: 10307
  • Configure the "%SystemRoot%System32mui" directory permissions to organizational standards., CC ID: 10308
  • Configure the "%SystemRoot%System32 et.exe" file permissions to organizational standards., CC ID: 10309
  • Configure the "%SystemRoot%System32 etsh.exe" file permissions to organizational standards., CC ID: 10310
  • Configure the "%SystemRoot%System32 et1.exe" file permissions to organizational standards., CC ID: 10311
  • Configure the "%SystemRoot%System32 eg.exe" file permissions to organizational standards., CC ID: 10312
  • Configure the "%SystemRoot%System32 egini.exe" file permissions to organizational standards., CC ID: 10313
  • Configure the "%SystemRoot%System32 egsvr32.exe" file permissions to organizational standards., CC ID: 10314
  • Configure the "%SystemRoot%System32 oute.exe" file permissions to organizational standards., CC ID: 10315
  • Configure the "%SystemRoot%System32sc.exe" file permissions to organizational standards., CC ID: 10316
  • Configure the "%SystemRoot%System32ShellExt" directory permissions to organizational standards., CC ID: 10317
  • Configure the "%SystemRoot%System32subst.exe" file permissions to organizational standards., CC ID: 10318
  • Configure the "%SystemRoot%System32systeminfo.exe" file permissions to organizational standards., CC ID: 10319
  • Configure the "%SystemRoot%System32 elnet.exe" file permissions to organizational standards., CC ID: 10320
  • Configure the "%SystemRoot%System32 ftp.exe" file permissions to organizational standards., CC ID: 10321
  • Configure the "%SystemRoot%System32wbem" directory permissions to organizational standards., CC ID: 10322
  • Configure the "%SystemRoot%System32 lntsvr.exe" file permissions to organizational standards., CC ID: 10323
  • Configure the "%SystemRoot%System32wbemmof" directory permissions to organizational standards., CC ID: 10324
  • Configure the "%SystemRoot%System32wbem epository" directory permissions to organizational standards., CC ID: 10325
  • Configure the "%SystemRoot%System32wbemlogs" directory permissions to organizational standards., CC ID: 10326
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftCryptography" registry key permissions to organizational standards., CC ID: 10327
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREClasses.hlp" registry key permissions to organizational standards., CC ID: 10328
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREClasseshelpfile" registry key permissions to organizational standards., CC ID: 10329
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftTracing" registry key permissions to organizational standards., CC ID: 10330
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftCryptographyCalais" registry key permissions to organizational standards., CC ID: 10331
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionShell" registry key permissions to organizational standards., CC ID: 10332
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionTelephony" registry key permissions to organizational standards., CC ID: 10333
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionReliability" registry key permissions to organizational standards., CC ID: 10334
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionExplorerUser Shell" registry key permissions to organizational standards., CC ID: 10335
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersion" registry key permissions to organizational standards., CC ID: 10336
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftSpeech" registry key permissions to organizational standards., CC ID: 10337
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftMSDTC" registry key permissions to organizational standards., CC ID: 10338
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftEventSystem" registry key permissions to organizational standards., CC ID: 10339
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftEnterpriseCertificates" registry key permissions to organizational standards., CC ID: 10340
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionPorts" registry key permissions to organizational standards., CC ID: 10341
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftDriver Signing" registry key permissions to organizational standards., CC ID: 10342
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREPolicies" registry key permissions to organizational standards., CC ID: 10343
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftCommand Processor" registry key permissions to organizational standards., CC ID: 10344
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftAdsProvidersWinNT" registry key permissions to organizational standards., CC ID: 10345
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftADsProvidersNWCOMPAT" registry key permissions to organizational standards., CC ID: 10346
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftADsProvidersNDS" registry key permissions to organizational standards., CC ID: 10347
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftADsProvidersLDAPExtensions" registry key permissions to organizational standards., CC ID: 10348
  • Configure the "HKEY_USERS.DEFAULTSoftwareMicrosoftSystemCertificatesRootProtectedRoots" registry key permissions to organizational standards., CC ID: 10349
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSession Manager" registry key permissions to organizational standards., CC ID: 10350
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsHelp" registry key permissions to organizational standards., CC ID: 10351
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTcpip" registry key permissions to organizational standards., CC ID: 10352
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftNon-Driver Signing" registry key permissions to organizational standards., CC ID: 10353
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftDeviceManager" registry key permissions to organizational standards., CC ID: 10354
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesClipSrvSecurity" registry key permissions to organizational standards., CC ID: 10355
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDHCP" registry key permissions to organizational standards., CC ID: 10356
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlServiceCurrent" registry key permissions to organizational standards., CC ID: 10357
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLogSecurity" registry key permissions to organizational standards., CC ID: 10358
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesWMISecurity" registry key permissions to organizational standards., CC ID: 10359
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesW32TimeSecurity" registry key permissions to organizational standards., CC ID: 10360
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesTapiSrvSecurity" registry key permissions to organizational standards., CC ID: 10361
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSCardSvrSecurity" registry key permissions to organizational standards., CC ID: 10362
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSamssSecurity" registry key permissions to organizational standards., CC ID: 10363
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesRpcSsSecurity" registry key permissions to organizational standards., CC ID: 10364
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetDDEdsdmSecurity" registry key permissions to organizational standards., CC ID: 10365
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionAccessibility" registry key permissions to organizational standards., CC ID: 10366
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServiceskdcSecurity" registry key permissions to organizational standards., CC ID: 10367
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesAppMgmtSecurity" registry key permissions to organizational standards., CC ID: 10368
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices" registry key permissions to organizational standards., CC ID: 10369
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurePipeServers" registry key permissions to organizational standards., CC ID: 10370
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlNetwork" registry key permissions to organizational standards., CC ID: 10371
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSAData" registry key permissions to organizational standards., CC ID: 10372
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSAGBG" registry key permissions to organizational standards., CC ID: 10373
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSASkew1" registry key permissions to organizational standards., CC ID: 10374
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLSAJD" registry key permissions to organizational standards., CC ID: 10375
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControl" registry key permissions to organizational standards., CC ID: 10376
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftwbem" registry key permissions to organizational standards., CC ID: 10377
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNetDDESecurity" registry key permissions to organizational standards., CC ID: 10378
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionFont" registry key permissions to organizational standards., CC ID: 10379
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesEventLog" registry key permissions to organizational standards., CC ID: 10380
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerShares" registry key permissions to organizational standards., CC ID: 10381
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREWindows 3.1 Migration Status" registry key permissions to organizational standards., CC ID: 10382
  • Configure the "HKEY_LOCAL_MACHINESOFTWARESecure" registry key permissions to organizational standards., CC ID: 10383
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREProgram Groups" registry key permissions to organizational standards., CC ID: 10384
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon" registry key permissions to organizational standards., CC ID: 10385
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionTime Zones" registry key permissions to organizational standards., CC ID: 10386
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionIniFileMapping" registry key permissions to organizational standards., CC ID: 10387
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesUPS" registry key permissions to organizational standards., CC ID: 10388
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionFontMapper" registry key permissions to organizational standards., CC ID: 10389
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionCompatibility" registry key permissions to organizational standards., CC ID: 10390
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionAEDebug" registry key permissions to organizational standards., CC ID: 10391
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOnceEx" registry key permissions to organizational standards., CC ID: 10392
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRunOnce" registry key permissions to organizational standards., CC ID: 10393
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun" registry key permissions to organizational standards., CC ID: 10394
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows" registry key permissions to organizational standards., CC ID: 10395
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecure" registry key permissions to organizational standards., CC ID: 10396
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftRPC" registry key permissions to organizational standards., CC ID: 10397
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options" registry key permissions to organizational standards., CC ID: 10398
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSetupRecoveryConsole" registry key permissions to organizational standards., CC ID: 10399
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlProductOptions" registry key permissions to organizational standards., CC ID: 10400
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlKeyboard Layout" registry key permissions to organizational standards., CC ID: 10401
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlContentIndex" registry key permissions to organizational standards., CC ID: 10402
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlComputerName" registry key permissions to organizational standards., CC ID: 10403
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionGroup Policy" registry key permissions to organizational standards., CC ID: 10404
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSchedule" registry key permissions to organizational standards., CC ID: 10405
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSvchost" registry key permissions to organizational standards., CC ID: 10406
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionSecEdit" registry key permissions to organizational standards., CC ID: 10407
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionProfileList" registry key permissions to organizational standards., CC ID: 10408
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionEFS" registry key permissions to organizational standards., CC ID: 10409
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionDrivers32" registry key permissions to organizational standards., CC ID: 10410
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionClasses" registry key permissions to organizational standards., CC ID: 10411
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersion" registry key permissions to organizational standards., CC ID: 10412
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftSystemCertificates" registry key permissions to organizational standards., CC ID: 10413
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWindows" registry key permissions to organizational standards., CC ID: 10414
  • Configure the "%SystemRoot%Web" directory permissions to organizational standards., CC ID: 10415
  • Configure the "HKEY_LOCAL_MACHINESOFTWAREMicrosoftOle" registry key permissions to organizational standards., CC ID: 10416
  • Configure the "HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlPrintPrinters" registry key permissions to organizational standards., CC ID: 10417
  • Configure the "HKEY_USERS.DEFAULTSoftwareMicrosoftWindowsCurrentVersionPolicies" registry key permissions to organizational standards., CC ID: 10418


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Table F-1: For Windows 2000 Server, the organization must configure the system per the NIST SP 800-53 access enforcement control requirements for registry keys. Table F-2: For Windows 2003 Server, the organization must configure the system per the NIST SP 800-53 access enforcement control requiremen… (Table F-1, Table F-2, Table F-3, CMS Business Partners Systems Security Manual, Rev. 10)
  • The Access Control Lists (ACLs) for all disabled services should be set to Administrators: Full Control; System: Full Control; and Interactive: Read. These are the default settings for Windows 2003. (ยง 5.3.10, DISA Windows Server 2003 Security Checklist, Version 6 Release 1.11)