home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / boot.wim / 2 / Windows / inf / puwk.inf < prev    next >
Windows Setup INFormation  |  2008-01-18  |  10KB  |  80 lines
  1.  ■; Copyright (c) Microsoft Corporation.  All rights reserved.
  2. ;
  3. ; Security Configuration Template for Security Configuration Editor
  4. ;
  5. ; Template Name:        puwk.INF
  6. ; Template Version:     05.10.PU.0000
  7. ;
  8. ; Default Security for Vista - Power User rollback template
  9. ;
  10. ; There is no template to undo the effect of applying the Power User permissions.
  11. ; Please make sure you have completely understood the impact of adding Power User 
  12. ; aces before applying the template. 
  14. [Profile Description]
  15. %SCEPowerUserProfileDescription%
  17. [version]
  18. signature="$CHICAGO$"
  19. revision=1
  20. DriverVer=06/21/2006,6.0.6001.18000
  22. [Privilege Rights]
  23. SeChangeNotifyPrivilege = Add:, *S-1-5-32-547
  24. SeInteractiveLogonRight = Add:, *S-1-5-32-547
  25. SeNetworkLogonRight = Add:, *S-1-5-32-547
  26. SeProfileSingleProcessPrivilege = Add:, *S-1-5-32-547
  27. SeShutdownPrivilege = Add:, *S-1-5-32-547
  28. SeSystemTimePrivilege = Add:, *S-1-5-32-547
  29. SeUndockPrivilege = Add:, *S-1-5-32-547
  31. [Service General Setting]
  32. ;Note: startup type should not be configured during setup\dcpromo.
  33. ;autostarted on workstations and servers, standalone or joined - Remove PU ability to stop\start.
  34. dmserver,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  35. NtmsSvc,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  36. Sysmonlog,,"D:(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCRPLOCR;;;LU)S:AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  38. ;Not autostarted, but non-default DACL - Remove PU ability to change template
  39. ClipSrv,,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLORC;;;PU)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  40. NetDDE,,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLORC;;;PU)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  41. NetDDEdsdm,,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLORC;;;PU)(A;;CCLCSWRPLO;;;IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  43. [Registry Keys]
  44. "MACHINE\Software",0,"D:P(A;CI;GR;;;BU)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  46. ;Same as parent, but this is the target of a symlink - set explicitly.
  47. "MACHINE\SOFTWARE\Classes",0,"D:P(A;CI;GR;;;BU)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  48. "MACHINE\SOFTWARE\Classes\.hlp",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  50. "MACHINE\System",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  51. "USERS\.DEFAULT",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  53. [File Security]
  54. ;---------------------------------------------------------------------------------------------
  55. ;ProgramFiles
  56. ;---------------------------------------------------------------------------------------------
  57. ;Need to use the SceInfProgramFiles environment var to handle the Win9x upgrade case which is treated like clean-install
  58. ;"%SystemDrive%\%SCEInfProgramFiles%",0,"D:P(A;CIOI;GRGX;;;BU)(A;CIOI;GRGWGXSD;;;PU)(A;CIOI;GA;;;BA)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)"
  59. "%SceInfProgramFiles%",0,"D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;OICIIO;GA;;;SY)(A;;0x1301bf;;;BA)(A;OICIIO;GA;;;BA)(A;OICI;GXGR;;;BU)(A;OICIIO;GA;;;CO)(A;OICI;GRGWGXSD;;;PU)"
  61. ;---------------------------------------------------------------------------------------------
  62. ;System Root (Typically \WINDOWS)
  63. ;---------------------------------------------------------------------------------------------
  64. "%SystemRoot%",0,"D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;IOCIOI;GA;;;SY)(A;;0x1301bf;;;BA)(A;IOCIOI;GA;;;BA)(A;CIOI;GRGX;;;BU)(A;OICIIO;GA;;;CO)(A;CIOI;GRGWGXSD;;;PU)"
  66. ;---------------------------------------------------------------------------------------------
  67. ;System Directory (Typically \Windows\System32)
  68. ;---------------------------------------------------------------------------------------------
  69. "%SystemDirectory%",0,"D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;IOCIOI;GA;;;SY)(A;;0x1301bf;;;BA)(A;IOCIOI;GA;;;BA)(A;CIOI;GRGX;;;BU)(A;OICIIO;GA;;;CO)(A;CIOI;GRGWGXSD;;;PU)"
  71. [Strings]
  72. SceInfProgramFiles = "%ProgramFiles%"
  73. SceInfProgramFilesx86 = "%ProgramFiles% (x86)"
  74. SceInfCommonProgramFiles = "%CommonProgramFiles%"
  75. SCEPowerUserProfileDescription = "Power User Security Settings."
  76. SCEInfSysdir1 = "edit.com"
  77. SCEInfSysdir2 = "edit.hlp"
  78. SCEInfHelp1 = "signin.hlp"
  79.