SecureSystemPartition value in securit policy .inf files

  • Thread starter Thread starter David Barnes
  • Start date Start date
D

David Barnes

Ok so I'm reviewing the baseline security policy files and building a
tighter one for our Bastion host..

However I've run across a parameter that I can't find any information
on.."SecureSystemPartition".
A google search only throws up a few entries and these all have this listed
in an appendix as an example of a policy .inf file!! How helpfull!
A search on Microsoft.com reveals "sorry, no results were found"

This parameter is evident even on XPpro in several of the security
templates. eg c:\windows\security\templates\securedc.inf

Does anyone know what this is for, or better still know of any decent
documentation for the parameters and settings in these files. IE what the
parameters are, what their possible values and defaults are, what the
consequences are of each value setting, and what interactions and
restrictions need to be observed.

David
 
Yeah.. got these.. 'War and Peace' is smaller!! (and more straightforward)
I do note in the bastion host .inf file that it does not include any
filesystem protection settings..And some of the settings that are in the
enterprise secure settings files are missing..
Does one have to apply these in sequence? ..
The documents hint that these are 'cumulative' and the lower settings files
are your 'base' starting point.. The fact that some settings are missing in
the bastion file tend me to think that I have to apply others first.

David
 
Back
Top