HP Survivable Branch Communication zl Module powered by Microsoft Lync Planning and Design Guide 2011-02

2-35
Design Considerations
Planning Security
The tables in the following sections list the security hardening actions that HP
has implemented at factory default settings—as well as the actions that you
must not take because they cause the SBM implementation to fail. For your
reference, the SBM will be a member of these groups when it joins the domain:
■ Domain Computers
■ RTCComponentUniversalServices
■ RTCHSUniversalServices
■ RTCSBAUniversalServices
Security Hardening at the SBM Factory Default Settings
Table 2-20 displays the settings that HP has configured on the SBM in order
to increase its security. The first column lists the registry path for the setting,
and the second column lists the setting at factory defaults. A few settings are
not registry settings, so the first column lists other identifying information.
Microsoft Windows Server 2008 R2 itself applies several security hardening
settings. These settings are not included in the table. Refer to Microsoft for
more information.