Zeiss CLARUS 500 Gebrauchsanweisung Seite 95

Gebrauchsanweisung
CLARUS® 500
Domain member: Digitally encrypt secure channel data (when possible)
Domain member: Digitally sign secure channel data (when possible)
Domain member: Disable machine account password changes
Domain member: Maximum machine account password age
Domain member: Require strong (Windows 2000 or later) session key
Don't allow SmartScreen Filter warning overrides
Enable computer and user accounts to be trusted for delegation
Enable insecure guest logons
Enable local admin password management
Enable RPC Endpoint Mapper Client Authentication
Enable screen saver
Enforce password history
Enumerate administrator accounts on elevation
Enumerate local users on domain-joined computers
Force shutdown from a remote system
Generate security audits
Hardened UNC Paths
Hardened UNC Paths:
Hardened UNC Paths: = \\*\NETLOGON"
RequireMutualAuthentication = 1
RequireIntegrity = 1
Impersonate a client after authentication
Include command line in process creation events
Increase scheduling priority
Interactive logon: Machine account lockout threshold
Interactive logon: Machine inactivity limit
Interactive logon: Number of previous logons to cache (in case domain controller
is not available)
Interactive logon: Prompt user to change password before expiration
2660021171279 Rev. B 2019-01
Policy
5 Konfiguration
5.11 Systemadministration
Setting
Enabled
Enabled
Disabled
30 day(s)
Enabled
Disabled
No One
Disabled
Enabled
Enabled
Enabled
24 password(s)
Disabled
Disabled
Administrators
Local Service,
Network Service
Enabled
Administrators,
SERVICE, Local
Service, Network
Service
Enabled
Administrators
10 invalid logon
attempts
900 seconds
10 logon(s)
5 day(s)
95 / 202