SBM powered by Microsoft Lync Administrator's Guide 2010-11

B-3
HP SBM Security Hardening
Security Hardening at the SBM Factory Default Settings
Table B-1. Windows 7 USGCB Recommended Settings Implemented at Factory
Default Settings
Setting’s Registry Path or Policy Path Implemented USGCB
Setting
Services Disable:
•EapHost
FCRegSvc
•fdPHost
FontCache
•hidserv
hkmsvc
•idsvc
•KtmRm
lltdsvc
•MMCSS
•MSDTC
MSiSCSI
napagent
PolicyAgent
•RasAuto
•RasMan
•SCardSvr
SCPolicySvc
seclogon
•SENS
Spooler
SstpSvc
•TapiSrv
•TBS
THREADORDER
•TrkWks
UI0Detect
W32Time
WcsPlugInService
WdiServiceHost
WdiSystemHost
•Wecsvc
wercplsupport
•WerSvc
WinHttpAutoProxySvc
•WinRM
wmiApSrv
wudfsvc