DC *inf file so I could secure/lockdown a Production Domain Controller/AD box

  • Thread starter Thread starter James
  • Start date Start date
J

James

It is a good practice to include the registry settings
ie. (example)

"HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\DeleteRoamingCache",dword, 1

With the Security Settings - Account Policies & Local
Policies.

In other words, i am looking for a baseline DC *inf file
so I could secure/lockdown a Production Domain
Controller/AD box.

Regards,
James
 
www.cisecurity.org
Center for Internet Securty provide baseline guidance for registry
lockdowns.
the templates are free for the download.
It is a good practice to include the registry settings
ie. (example)

"HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\DeleteRoamingCache",dword, 1

With the Security Settings - Account Policies & Local
Policies.

In other words, i am looking for a baseline DC *inf file
so I could secure/lockdown a Production Domain
Controller/AD box.

Regards,
James
Click to expand...

--
"Don't lose sight of security. Security is a state of being, not a
state of budget. He with the most firewalls still does not win.
Put down that honeypot and keep up to date on your patches. Demand
better security from vendors and hold them responsible. Use what
you have, and make sure you know how to use it properly and
effectively."
~ Rain Forest Puppy

http://www.wiretrip.net/rfp/txt/evolution.txt
 
Back
Top