Customizing Security For Your Installed Base Of Pcs - HP Brio BA200 User Manual

Windows NT 4.0
Windows 2000
Example 1
Example 2
Example 3

Customizing Security For Your Installed Base of PCs

These security options can be used to customize the level of security
and accessibility provided by each PC, and the installed base as a
whole. Each PC can have its own security settings as appropriate.
You have a shared or communal PC that does not have sensitive data.
The PC only really needs to be started up once in the morning, using a
dummy Windows NT account made for this purpose. This configuration
may be appropriate:
Manual logon for: Administrators
On card removal: Continue
… … … …
Make screen savers secure
;
Allow unauthenticated shutdown
;
Display smart card owner's name...
;
Display last username...
You want to prevent users, as much as possible, from preparing their
own smart cards for a maximum control over smart card management.
This configuration may be appropriate:
… … … …
Allow smart card initialization
Manual logon for: Administrators
Random passwords: Force
… … … …
Allow unauthenticated shutdown
;
Display smart card owner's name...
;
Display last username...
There is a PC used by only one person who has high security clearance.
Also, the PC contains highly sensitive data and requires maximum
security. This configuration may be appropriate:
… … … …
Allow smart card initialization
4 Managing Security and Smart Cards
Managing Security: Configuration Settings
59