SBM powered by Microsoft Lync Administrator's Guide 2010-11
B-3
HP SBM Security Hardening
Security Hardening at the SBM Factory Default Settings
Table B-1. Windows 7 USGCB Recommended Settings Implemented at Factory
Default Settings
Setting’s Registry Path or Policy Path Implemented USGCB
Setting
Services Disable:
•EapHost
• FCRegSvc
•fdPHost
• FontCache
•hidserv
• hkmsvc
•idsvc
•KtmRm
• lltdsvc
•MMCSS
•MSDTC
• MSiSCSI
• napagent
• PolicyAgent
•RasAuto
•RasMan
•SCardSvr
• SCPolicySvc
• seclogon
•SENS
• Spooler
• SstpSvc
•TapiSrv
•TBS
• THREADORDER
•TrkWks
• UI0Detect
• W32Time
• WcsPlugInService
• WdiServiceHost
• WdiSystemHost
•Wecsvc
• wercplsupport
•WerSvc
• WinHttpAutoProxySvc
•WinRM
• wmiApSrv
• wudfsvc