HP Survivable Branch Communication zl Module powered by Microsoft Lync Planning and Design Guide 2011-02

2-41
Design Considerations
Planning Security
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
KeepAliveTime
300000
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
PerformRouterDiscovery
0
HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\
TcpMaxDataRetransmissions
3
HKLM\System\CurrentControlSet\Services\Tcpip6\Parameter
s\DisableIPSourceRouting
2
HKLM\System\CurrentControlSet\Services\Tcpip6\Parameter
s\TcpMaxDataRetransmissions
3
Policy path (no registry setting):
Computer Configuration\Windows Settings\Security
Settings\Account Policies\Account Lockout Policy
Account lockout duration =
15 minutes
Account lockout threshold =
5 invalid attempts
Reset lockout counter after =
15 minutes
Policy path (no registry setting):
Computer Configuration\Windows Settings\Security
Settings\Account Policies\Password Policy
Enforce password history =
24 passwords remembered
Maximum password age = 60
days
Policy path (no registry setting):
Computer Configuration\Windows Settings\Security
Settings\Local Policies\Security Options
Account
• Rename administrator
account = SBMAdmin
• Rename guest account =
Renamed_Guest
Policy path (no registry setting):
Computer Configuration\Windows Settings\Security
Settings\Local Policies\Security Options
Network security
Force logoff when logon
hours expire = Enabled
Policy path (no registry setting):
Computer Configuration\Windows Settings\Security
Settings\Local Policies\User Rights Assignment
Deny access to this
computer from the network =
Guests
Deny log on as a batch job =
Guests
Deny log on locally = Guests
Deny log on through Remote
Desktop Services = Guests
Increase a process working
set = Administrators, Local
Services
Setting’s Registry Path or Policy Path Windows 7 USGCB
Recommended Setting