SBM powered by Microsoft Lync Administrator's Guide 2010-11

B-5
HP SBM Security Hardening
Security Hardening at the SBM Factory Default Settings
HKLM\Software\Policies\Microsoft\Windows
NT\Printers!DoNotInstallCompatibleDriverFromWindowsUpdate
1
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services!MaxDisconnectionTime; should be in
HKLM\SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp!MaxDisconnectionTime
60000
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal
Services!MaxIdleTime; should be in
HKLM\SYSTEM\CurrentControlSet\Control\Terminal
Server\WinStations\RDP-Tcp!MaxIdleTime
900000
HKLM\Software\Policies\Microsoft\Windows\AppCompat!
DisableInventory
1
HKLM\SOFTWARE\Policies\Microsoft\Windows\Device
Metadata!PreventDeviceMetadataFromNetwork
1
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\
Settings!DisableSendGenericDriverNotFoundToWER
1
HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\
Settings!DisableSystemRestore
0
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!
DontPromptForWindowsUpdate
1
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!
DontSearchWindowsUpdate
1
HKLM\Software\Policies\Microsoft\Windows\DriverSearching!
SearchOrderConfig
0
HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!
MaxSize
32768
HKLM\Software\Policies\Microsoft\Windows\Explorer!NoData
ExecutionPrevention
0
HKLM\Software\Policies\Microsoft\Windows\Explorer!No
HeapTerminationOnCorruption
0
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{35378EAC-683F-11D2-A89A-
00C04FBBCFA2}!NoBackgroundPolicy,
HKLM\Software\Policies\Microsoft\Windows\Group
Policy\{35378EAC-683F-11D2-A89A-
00C04FBBCFA2}!NoGPOListChanges
0
HKLM\Software\Policies\Microsoft\Windows\Installer!SafeFor
Scripting
0
HKLM\Software\Policies\Microsoft\Windows\Internet
Connection Wizard!ExitOnMSICW
1