Cisco TELEPRESENCE MANAGEMENT SUITE SECURE SERVER - CONFIGURATION GUIDE 13.0 Configuration Manual page 26

Policy
Network access: Named Pipes that can be
accessed anonymously
Network access: Remotely accessible registry
paths
Network access: Remotely accessible registry
paths and subpaths
Network access: Restrict anonymous access to
Named Pipes and Shares
Network access: Shares that can be accessed
anonymously
Network access: Sharing and security model for
local accounts
Network security: Do not store LAN Manager
hash value on next password change
Network security: Force logoff when logon hours
expire
Network security: LAN Manager authentication
level
Network security: LDAP client signing
requirements
Network security: Minimum session security for
NTLM SSP based (including secure RPC)
clients
Network security: Minimum session security for
NTLM SSP based (including secure RPC)
servers
Recovery console: Allow automatic
administrative logon
Recovery console: Allow floppy copy and
access to all drives and all folders
Shutdown: Allow system to be shut down
without having to log on
Shutdown: Clear virtual memory pagefile
Cisco TMS Secure Server Configuration Guide 13.0
Securing Windows Server 2003 tasks
Security Setting
COMNAP
COMNODE
SQL\QUERY
SPOOLSS
LLSRPC
netlogon
lsarpc
samr
browser
System\CurrentControlSet\Control\ProductOptions
System\CurrentControlSet\Control\Server
Applications
Software\Microsoft\Windows NT\CurrentVersion
System\CurrentControlSet\Control\Print\Printers
System\CurrentControlSet\Services\Eventlog
Software\Microsoft\OLAP Server
Software\Microsoft\Windows
NT\CurrentVersion\Print
Software\Microsoft\Windows
NT\CurrentVersion\Windows
Enabled
Classic - Local users ...
Enabled
Disabled
Send NTMLv2 response only
Negotiate Signing
Enabled all settings
Enabled all settings
Disabled
Disabled
Disabled
Disabled
Page 26 of 34