DC *inf file so I could secure/lockdown a Production Domain Controller/AD box

[James]

It is a good practice to include the registry settings
ie. (example)

"HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\DeleteRoamingCache",dword, 1

With the Security Settings - Account Policies & Local
Policies.

In other words, i am looking for a baseline DC *inf file
so I could secure/lockdown a Production Domain
Controller/AD box.

Regards,
James

 

[Susan Bradley, CPA aka Ebitz SBS Rocks [MVP]]

www.cisecurity.org
Center for Internet Securty provide baseline guidance for registry
lockdowns.
the templates are free for the download.

It is a good practice to include the registry settings
ie. (example)

"HKLM\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\Winlogon\DeleteRoamingCache",dword, 1

With the Security Settings - Account Policies & Local
Policies.

In other words, i am looking for a baseline DC *inf file
so I could secure/lockdown a Production Domain
Controller/AD box.

Regards,
James

--
"Don't lose sight of security. Security is a state of being, not a
state of budget. He with the most firewalls still does not win.
Put down that honeypot and keep up to date on your patches. Demand
better security from vendors and hold them responsible. Use what
you have, and make sure you know how to use it properly and
effectively."
~ Rain Forest Puppy

http://www.wiretrip.net/rfp/txt/evolution.txt