home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / WindowsServerTrial / server.iso / sources / install.wim / 5 / Windows / inf / dcfirst.inf < prev    next >
Windows Setup INFormation  |  2008-01-18  |  8KB  |  134 lines
  1.  ■; Copyright (c) Microsoft Corporation.  All rights reserved.
  2. ;
  3. ; Security Configuration Template for Security Configuration Editor
  4. ;
  5. ; Template Name:    DCFirst.INF
  6. ; Template Version: 05.00.DF.0000
  7. ;
  8. ; Contains Default Policy Settings for Windows NT 5.0 Domain Controller.
  9. ; This template is NOT used by SCE during setup
  10. ; This template is applied via GP during Winlogon for the first DC in a Tree
  11. ; This template should NOT be used on Workstations or Servers.
  12. ;
  13. ; Please DO NOT EDIT version section.
  14. ;
  15. [version]
  16. signature="$CHICAGO$"
  17. revision=1
  18. DriverVer=06/21/2006,6.0.6001.18000
  20. [Kerberos Policy]
  21. ; in hours
  22. MaxTicketAge=10
  23. ; in days
  24. MaxRenewAge=7
  25. ; in minutes
  26. MaxServiceAge=600
  27. ; in minutes
  28. MaxClockSkew=5
  29. ; enforce user logon restrictions = yes
  30. TicketValidateClient=1
  32. ;----------------------------------------------------------------
  33. ;Registry Values
  34. ;----------------------------------------------------------------
  35. [Registry Values]
  36. ; Registry value name in full path = Type, Value
  37. ; REG_SZ                      ( 1 )
  38. ; REG_EXPAND_SZ               ( 2 )  // with environment variables to expand
  39. ; REG_BINARY                  ( 3 )
  40. ; REG_DWORD                   ( 4 )
  41. ; REG_MULTI_SZ                ( 7 )
  43. MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash=4,1
  45. ;----------------------------------------------------------------------
  46. ;   Restricted Groups
  47. ;----------------------------------------------------------------------
  48. [Group Membership]
  49. ;Accounts Created During Server Role are Maintained so ignore groups.
  51. ;Operational Groups
  52. ;%SceInfBackupOp%__Memberof =
  53. ;%SceInfBackupOp%__Members =
  54. ;%SceInfGuests%__Memberof =
  55. ;%SceInfPrintOp%__Members =
  56. ;%SceInfReplicator%__Memberof =
  57. ;%SceInfReplicator%__Members =
  58. ;%SceInfServerOp%__Memberof =
  59. ;%SceInfServerOp%__Members =
  61. ;Account Groups
  62. ;%SceInfAccountOp%__Memberof =
  63. ;%SceInfAccountOp%__Members =
  64. ;%SceInfAdmins%__Memberof =
  65. ;%SceInfAdmins%__Members = %SceInfAdministrator%, %SceInfDomainAdmins%
  66. ;%SceInfDomainAdmins%__Memberof =
  67. ;%SceInfDomainAdmins%__Members = %SceInfAdministrator%
  68. ;%SceInfDomainGuests%__Memberof =
  69. ;%SceInfDomainGuests%__Members = %SceInfGuest%
  70. ;%SceInfDomainUsers%__Memberof =
  71. ;%SceInfDomainUsers%__Members = %SceInfAdministrator%
  72. ;%SceInfUsers%__Memberof =
  73. ;%SceInfUsers%__Members = %SceInfDomainUsers%
  74. ;%SceInfGuests%__Members = %SceInfDomainGuests%
  75. ;%SceInfPrintOp%__Memberof =
  77. [System Access]
  78. ;----------------------------------------------------------------
  79. ;Account Policies - Password Policy
  80. ;----------------------------------------------------------------
  81. MinimumPasswordAge = 1
  82. MaximumPasswordAge = 42
  83. MinimumPasswordLength = 7
  84. PasswordComplexity = 1
  85. PasswordHistorySize = 24
  86. RequireLogonToChangePassword = 0
  87. ClearTextPassword = 0
  89. ;----------------------------------------------------------------
  90. ;Account Policies - Lockout Policy
  91. ;----------------------------------------------------------------
  92. ;No Account Lockout
  93. LockoutBadCount = 0
  95. ;The following are not configured when No Account Lockout
  96. ;ResetLockoutCount = 30
  97. ;LockoutDuration = 30
  100. ;----------------------------------------------------------------
  101. ;Local Policies - Security Options
  102. ;----------------------------------------------------------------
  103. ;DC Only
  104. ForceLogoffWhenHourExpire = 0
  105. LSAAnonymousNameLookup = 0
  107. ;NewAdministatorName =
  108. ;NewGuestName =
  109. ;SecureSystemPartition
  112. [Strings]
  114. SceInfAdministrator = "Administrator"
  115. SceInfAdmins = "Administrators"
  116. SceInfAcountOp = "Account Operators"
  117. SceInfAuthUsers = "Authenticated Users"
  118. SceInfBackupOp = "Backup Operators"
  119. SceInfDomainAdmins = "Domain Admins"
  120. SceInfDomainGuests = "Domain Guests"
  121. SceInfDomainUsers = "Domain Users"
  122. SceInfEveryone = "Everyone"
  123. SceInfGuests = "Guests"
  124. SceInfGuest = "Guest"
  125. SceInfPowerUsers = "Power Users"
  126. SceInfPrintOp = "Print Operators"
  127. SceInfReplicator = "Replicator"
  128. SceInfServerOp = "Server Operators"
  129. SceInfUsers = "Users"
  130. SceInfMTSAdmins = "MTS Administrators"
  131. SceInfMTSImpersonators = "MTS Impersonators"
  132. SceInfMTSAdmin = "MTS_Admin"
  133.