HP Advanced Services zl Module with Microsoft® Windows Server® 2008 R2 Installation and Getting Started Guide

4-8
Special Guidelines for Using the Advanced Services zl Module with Microsoft Windows Server 2008 R2
Default Policies That Must Not Be Changed
Table 4-1 displays the USGCB recommended settings that must not be imple-
mented. The correct setting is configured by default unless a domain policy
changes it when the module joins the domain. Therefore, you should check
your domain policies for the settings shown in the table, and disable those
policies for the module.
The first column generally lists the registry path for the setting. A few settings
are not registry settings, so the first column lists other identifying information.
Table 4-1. Settings that Must Not be Implemented
Table 4-2 displays settings that might cause problems if they are implemented.
You should carefully consider whether to implement these policies or not.
Setting’s Registry Path or Policy Path Windows 7 USGCB
Recommended Setting
HKLM\Software\Microsoft\Windows\CurrentVersion\
Policies\Explorer!DisableLocalMachineRunOnce
Enabled
HKLM\Software\Microsoft\Windows\CurrentVersion\
Policies\Explorer!NoAutorun
Enabled: Do not execute any
autorun commands
HKLM\Software\Policies\Microsoft\Windows\Device
Install\Settings!AllowRemoteRPC
0
HKLM\Software\Policies\Microsoft\WindowsFirewall\
DomainProfile!DisableUnicastResponsesToMulticast
Broadcast; set in
HKLM\SYSTEM\CurrentControlSet\services\Shared
Access\Parameters\FirewallPolicy\DomainProfile!
DisableUnicastResponsesToMulticastBroadcast
0
HKLM\Software\Policies\Microsoft\WindowsFirewall\
PrivateProfile!DisableUnicastResponsesToMulticast
Broadcast; set in
HKLM\SYSTEM\CurrentControlSet\services\Shared
Access\Parameters\FirewallPolicy\StandardProfile!
DisableUnicastResponsesToMulticastBroadcast
0
Computer Configuration\Windows Settings\Security
Settings\Local Policies\Security Options
Accounts: Administrator
account status = Disabled