HP Advanced Services zl Module with Microsoft® Windows Server® 2008 R2 Installation and Getting Started Guide

4-10
Special Guidelines for Using the Advanced Services zl Module with Microsoft Windows Server 2008 R2
Security Hardening at the Factory Default Settings
Table 4-3. Windows 7 USGCB Recommended Settings Implemented at Factory
Default Settings
Setting’s Registry Path or Policy Path Implemented USGCB
Setting
HKCU\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!ScreenSaveActive; should be in
HKU\.DEFAULT\Control Panel\Desktop!ScreenSaveActive
1
HKCU\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!ScreenSaverIsSecure; should be in
HCU\.DEFAULT\Control Panel\Desktop!ScreenSaverIsSecure
1
HKCU\Software\Policies\Microsoft\Windows\Control
Panel\Desktop!ScreenSaveTimeOut; should be in
HKU\.DEFAULT\Control Panel\Desktop!ScreenSaveTimeOut
900
HKLM\Software\Microsoft\Windows
NT\CurrentVersion\Winlogon\ScreenSaverGracePeriod
5
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\
CredUI!EnumerateAdministrators
0
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\
System!LogonType
0
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services!MaxDisconnectionTime; should be in
HKLM\SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp!MaxDisconnectionTime
60000
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services!MaxIdleTime; should be in
HKLM\SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp!MaxIdleTime
900000
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error
Reporting!Disabled
1
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error
Reporting!DontSendAdditionalData
1
HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error
Reporting!LoggingDisabled
0
Policy path (no registry setting):
Computer Configuration\Windows Settings\Security
Settings\Account Policies\Account Lockout Policy
Account lockout duration
= 15 minutes
Account lockout
threshold = 5 invalid
attempts
Reset lockout counter
after = 15 minutes