home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 4 / Windows / inf / pusv.inf < prev    next >
Windows Setup INFormation  |  2008-01-18  |  22KB  |  151 lines
  1.  ■; Copyright (c) Microsoft Corporation.  All rights reserved.
  2. ;
  3. ; Security Configuration Template for Security Configuration Editor
  4. ;
  5. ; Template Name:        pusv.INF
  6. ; Template Version:     05.10.PUS.0000
  7. ;
  8. ; Power User Rollback template for LH Server.
  9. ;
  10. ; There is no template to undo the effect of applying the Power User permissions.
  11. ; Please make sure you have completely understood the impact of adding Power User 
  12. ; aces before applying the template. 
  14. [Profile Description]
  15. %SCEDefltSVProfileDescription%
  17. [version]
  18. signature="$CHICAGO$"
  19. revision=1
  20. DriverVer=06/21/2006,6.0.6001.18000
  23. [Privilege Rights]
  24. SeChangeNotifyPrivilege = Add:, *S-1-5-32-547
  25. SeInteractiveLogonRight = Add:, *S-1-5-32-547
  26. SeNetworkLogonRight = Add:, *S-1-5-32-547
  27. SeProfileSingleProcessPrivilege = Add:, *S-1-5-32-547
  28. SeShutdownPrivilege = Add:, *S-1-5-32-547
  29. SeSystemTimePrivilege = Add:, *S-1-5-32-547
  30. SeUndockPrivilege = Add:, *S-1-5-32-547
  32. [Service General Setting]
  33. ;autostarted on workstations and servers, standalone or joined
  34. TrkWks,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  35. Dnscache,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;NO)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  36. PolicyAgent,,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  37. dmserver,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  38. PlugPlay,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  39. Spooler,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  40. ProtectedStorage,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  41. RpcSs,,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWLORC;;;PU)(A;;CCLCSWRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  42. NtmsSvc,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  43. seclogon,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  44. lanmanserver,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  45. SENS,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  46. Schedule,2,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  47. Sysmonlog,,"D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCRPLOCR;;;LU)S:AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  48. LmHosts,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  49. LanmanWorkstation,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  50. RemoteRegistry,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  53. ClipSrv,4,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWLORC;;;PU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  54. NetDDE,4,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWLORC;;;PU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  55. NetDDEdsdm,4,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWLORC;;;PU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  57. ;Not autostarted if machine is standalone
  58. Netlogon,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  59. W32Time,,"D:(A;;CCLCSWLORC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLO;;;IU)(A;;CCLCSWLORC;;;PU)(A;;CCLCSWRPLO;;;BU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  61. ;Server Only Services
  62. Dfs,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  63. LicenseService,,"D:(A;;CCLCSWLOCRRC;;;AU)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWRPLOCRRC;;;PU)(A;;CCLCSWRPWPDTLOCRRC;;;SY)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
  66. [Registry Keys]
  68. "MACHINE\Software",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CI;GRGWSD;;;S-1-5-13)"
  70. ;Not same as parent, and this is the target of a symlink - set explicitly.
  71. "MACHINE\SOFTWARE\Classes",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  72. "MACHINE\SOFTWARE\Classes\.hlp",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GR;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  74. "MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  75. "MACHINE\SOFTWARE\Microsoft\SystemCertificates",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  76. "MACHINE\SOFTWARE\Microsoft\Tracing",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;CO)(A;CI;GR;;;S-1-5-13)"
  78. "MACHINE\Software\Microsoft\Windows\CurrentVersion",0,"D:P(A;CI;GR;;;BU)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  79. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  80. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  82. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CI;GRGWSD;;;S-1-5-13)"
  83. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace",0,"D:P(A;CI;GR;;;BU)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CI;GRGWSD;;;S-1-5-13)"
  84. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks",0,"D:P(A;CI;GR;;;BU)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CI;GRGWSD;;;S-1-5-13)"
  85. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CI;GRGWSD;;;S-1-5-13)"
  86. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)(A;CI;GRGWSD;;;S-1-5-13)"
  88. ;The following keys do not exist when we run.
  89. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy",1,"D:AR"
  90. "MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies",1,"D:AR"
  92. "MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Accessibility",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GR;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  93. "MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GR;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  94. "MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PerHwIdStorage",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  95. "MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GRGWSD;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  96. "MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole",0,"D:P(A;CI;GR;;;BU)(A;CI;GR;;;PU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  99. "MACHINE\SYSTEM\CurrentControlSet\Services",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GA;;;SY)(A;CI;GR;;;PU)(A;CI;GA;;;CO)"
  101. "USERS\.DEFAULT",0,"D:P(A;CI;GR;;;BU)(A;CI;GA;;;BA)(A;CI;GR;;;PU)(A;CI;GA;;;SY)(A;CI;GA;;;CO)"
  103. [File Security]
  104. ;---------------------------------------------------------------------------------------------
  105. ;ProgramFiles
  106. ;---------------------------------------------------------------------------------------------
  107. "%SceInfProgramFiles%",0,"D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;OICIIO;GA;;;SY)(A;;0x1301bf;;;BA)(A;OICIIO;GA;;;BA)(A;OICI;GXGR;;;BU)(A;OICIIO;GA;;;CO)(A;OICI;GRGWGXSD;;;PU)"
  109. ;---------------------------------------------------------------------------------------------
  110. ;System Root (Typically \WINDOWS)
  111. ;---------------------------------------------------------------------------------------------
  113. "%SystemRoot%",0,"D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GRGWGXSD;;;PU)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)"
  115. ;---------------------------------------------------------------------------------------------
  116. ;System Directory (Typically \Windows\System32)
  117. ;---------------------------------------------------------------------------------------------
  119. "%SystemDirectory%",0,"D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIOI;GRGX;;;BU)(A;CIOI;GA;;;BA)(A;CIOI;GRGWGXSD;;;PU)(A;CIOI;GA;;;SY)(A;CIOI;GA;;;CO)"
  121. [Strings]
  123. SceInfAdministrator = "Administrator"
  124. SceInfAdmins = "Administrators"
  125. SceInfAcountOp = "Account Operators"
  126. SceInfAuthUsers = "Authenticated Users"
  127. SceInfInteractive = "INTERACTIVE"
  128. SceInfBackupOp = "Backup Operators"
  129. SceInfDomainAdmins = "Domain Admins"
  130. SceInfDomainGuests = "Domain Guests"
  131. SceInfDomainUsers = "Domain Users"
  132. SceInfEveryone = "Everyone"
  133. SceInfGuests = "Guests"
  134. SceInfGuest = "Guest"
  135. SceInfPowerUsers = "Power Users"
  136. SceInfPrintOp = "Print Operators"
  137. SceInfReplicator = "Replicator"
  138. SceInfServerOp = "Server Operators"
  139. SceInfUsers = "Users"
  140. SceInfLocalService = "Local Service"
  141. SceInfNetworkService = "Network Service"
  142. SceInfProgramFiles = "%ProgramFiles%"
  143. SceInfProgramFilesx86 = "%ProgramFiles(x86)%"
  144. SceInfCommonProgramFiles = "%CommonProgramFiles%"
  145. SceInfRemoteDesktopUsers = "Remote Desktop Users"
  146. SceDefltSVProfileDescription = "Default Security Settings. (Windows Server)"
  147. SCEInfSysdir1 = "edit.com"
  148. SCEInfSysdir2 = "edit.hlp"
  149. SCEInfHelp1 = "signin.hlp"
  150.