SBM powered by Microsoft Lync™ Administrator's Guide 2011-11

B-2
HP SBM Security Hardening
Security Hardening at the SBM Factory Default Settings
Table B-1. Windows 7 USGCB Recommended Settings Implemented at Factory
Default Settings
Setting’s Registry Path or Policy Path Implemented USGCB
Setting
Services Disable:
• EapHost
• FCRegSvc
• fdPHost
• FontCache
• hidserv
• hkmsvc
• idsvc
• KtmRm
• lltdsvc
• MMCSS
• MSDTC
• MSiSCSI
• napagent
• PolicyAgent
• RasAuto
• RasMan
• SCardSvr
• SCPolicySvc
• seclogon
• SENS
• Spooler
• SstpSvc
• TapiSrv
• TBS
• THREADORDER
• TrkWks
• UI0Detect
• W32Time
• WcsPlugInService
• WdiServiceHost
• WdiSystemHost
• Wecsvc
• wercplsupport
• WerSvc
• WinHttpAutoProxySvc
• WinRM
• wmiApSrv
• wudfsvc