ÿþ<html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false"> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-16" /> <title>UC - Domain</title> <!-- Styles --> <style type="text/css"> body { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:Tahoma; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; } table { font-size:100%; table-layout:fixed; width:100%; } td,th { overflow:visible; text-align:left; vertical-align:top; white-space:normal; } .title { background:#FFFFFF; border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; position:relative; table-layout:fixed; width:100%; z-index:5; } .he0_expanded { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he1_expanded { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he1 { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he2 { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he3 { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he4 { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he4h { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he4i { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:Tahoma; font-size:100%; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; width:100%; } .he5 { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; } .he5h { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:Tahoma; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:55px; margin-right:0px; position:relative; width:100%; } .he5i { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:Tahoma; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; width:100%; } DIV .expando { color:#000000; text-decoration:none; display:block; font-family:Tahoma; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; } .he0 .expando { font-size:100%; } .info, .info3, .info4, .disalign { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; } .disalign TD { padding-bottom:5px; padding-right:10px; } .info TD { padding-right:10px; width:50%; } .info3 TD { padding-right:10px; width:33%; } .info4 TD, .info4 TH { padding-right:10px; width:25%; } .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; } .subtable, .subtable3 { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; } .subtable TD, .subtable3 TD { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; } .subtable TH, .subtable3 TH { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; } .subtable .footnote { border-top:1px solid #CCCCCC; } .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; } .subtable_frame { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; } .subtable_frame TD { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; } .subtable_frame TH { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; } .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; } .explainlink { color:#000000; text-decoration:none; cursor:hand; } .explainlink:hover { color:#0000FF; text-decoration:underline; } .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:Tahoma; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; } .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% Tahoma; line-height:8px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top:4px; position:relative; } .container { display:block; position:relative; } .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:Tahoma; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; } .rsopname { color:#333333; font-family:tahoma; font-size:130%; font-weight:bold; padding-left:11px; } .gponame{ color:#333333; font-family:Tahoma; font-size:130%; font-weight:bold; padding-left:11px; } .gpotype{ color:#333333; font-family:Tahoma; font-size:100%; font-weight:bold; padding-left:11px; } #uri { color:#333333; font-family:Tahoma; font-size:100%; padding-left:11px; } #dtstamp{ color:#333333; font-family:Tahoma; font-size:100%; padding-left:11px; text-align:left; width:30%; } #objshowhide { color:#000000; cursor:hand; font-family:Tahoma; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; } #gposummary { display:block; } #gpoinformation { display:block; } @media print { #objshowhide{ display:none; } body { color:#000000; border:1px solid #000000; } .title { color:#000000; border:1px solid #000000; } .he0_expanded { color:#000000; border:1px solid #000000; } .he1_expanded { color:#000000; border:1px solid #000000; } .he1 { color:#000000; border:1px solid #000000; } .he2 { color:#000000; background:#EEEEEE; border:1px solid #000000; } .he3 { color:#000000; border:1px solid #000000; } .he4 { color:#000000; border:1px solid #000000; } .he4h { color:#000000; border:1px solid #000000; } .he4i { color:#000000; border:1px solid #000000; } .he5 { color:#000000; border:1px solid #000000; } .he5h { color:#000000; border:1px solid #000000; } .he5i { color:#000000; border:1px solid #000000; } } v\:* {behavior:url(#default#VML);} </style> <!-- Script 1 --> <script language="vbscript"> <!-- '================================================================================ ' String "strShowHide(0/1)" ' 0 = Hide all mode. ' 1 = Show all mode. strShowHide = 1 'Localized strings strShow = "show" strHide = "hide" strShowAll = "show all" strHideAll = "hide all" strShown = "shown" strHidden = "hidden" strExpandoNumPixelsFromEdge = "10px" Function IsSectionHeader(obj) IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3") Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h") End Function Function IsSectionExpandedByDefault(objHeader) IsSectionExpandedByDefault = (Right(objHeader.className, Len("_expanded")) = "_expanded") End Function ' strState must be show | hide | toggle Sub SetSectionState(objHeader, strState) ' Get the container object for the section. It's the first one after the header obj. i = objHeader.sourceIndex Set all = objHeader.parentElement.document.all While (all(i).className <> "container") i = i + 1 Wend Set objContainer = all(i) If strState = "toggle" Then If objContainer.style.display = "none" Then SetSectionState objHeader, "show" Else SetSectionState objHeader, "hide" End If Else Set objExpando = objHeader.children.item(1) If strState = "show" Then objContainer.style.display = "block" objExpando.innerText = strHide ElseIf strState = "hide" Then objContainer.style.display = "none" objExpando.innerText = strShow End If End If End Sub Sub ShowSection(objHeader) SetSectionState objHeader, "show" End Sub Sub HideSection(objHeader) SetSectionState objHeader, "hide" End Sub Sub ToggleSection(objHeader) SetSectionState objHeader, "toggle" End Sub '================================================================================ ' When user clicks anywhere in the document body, determine if user is clicking ' on a header element. '================================================================================ Function document_onclick() Set strsrc = window.event.srcElement While (strsrc.className = "sectionTitle" Or strsrc.className = "expando" Or strsrc.className = "vmlimage") Set strsrc = strsrc.parentElement Wend ' Only handle clicks on headers. If Not IsSectionHeader(strsrc) Then Exit Function ToggleSection strsrc window.event.returnValue = False End Function '================================================================================ ' link at the top of the page to collapse/expand all collapsable elements '================================================================================ Function objshowhide_onClick() Set objBody = document.body.all Select Case strShowHide Case 0 strShowHide = 1 objshowhide.innerText = strShowAll For Each obji In objBody If IsSectionHeader(obji) Then HideSection obji End If Next Case 1 strShowHide = 0 objshowhide.innerText = strHideAll For Each obji In objBody If IsSectionHeader(obji) Then ShowSection obji End If Next End Select End Function '================================================================================ ' onload collapse all except the first two levels of headers (he0, he1) '================================================================================ Function window_onload() ' Only initialize once. The UI may reinsert a report into the webbrowser control, ' firing onLoad multiple times. If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then ' Initialize sections to default expanded/collapsed state. Set objBody = document.body.all For Each obji in objBody If IsSectionHeader(obji) Then If IsSectionExpandedByDefault(obji) Then ShowSection obji Else HideSection obji End If End If Next objshowhide.innerText = strShowAll document.documentElement.setAttribute "gpmc_reportInitialized", "true" End If End Function '================================================================================ ' When direction (LTR/RTL) changes, change adjust for readability '================================================================================ Function document_onPropertyChange() If window.event.propertyName = "dir" Then Call fDetDir(UCase(document.dir)) End If End Function Function fDetDir(strDir) strDir = UCase(strDir) Select Case strDir Case "LTR" Set colRules = document.styleSheets(0).rules For i = 0 To colRules.length -1 Set nug = colRules.item(i) strClass = nug.selectorText If nug.style.textAlign = "right" Then nug.style.textAlign = "left" End If Select Case strClass Case "DIV .expando" nug.style.Left = "" nug.style.right = strExpandoNumPixelsFromEdge Case "#objshowhide" nug.style.textAlign = "right" End Select Next Case "RTL" Set colRules = document.styleSheets(0).rules For i = 0 To colRules.length -1 Set nug = colRules.item(i) strClass = nug.selectorText If nug.style.textAlign = "left" Then nug.style.textAlign = "right" End If Select Case strClass Case "DIV .expando" nug.style.Left = strExpandoNumPixelsFromEdge nug.style.right = "" Case "#objshowhide" nug.style.textAlign = "left" End Select Next End Select End Function '================================================================================ 'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI). '================================================================================ Function window_onbeforeprint() For Each obji In document.all If obji.className = "expando" Then If obji.innerText = strHide Then obji.innerText = strShown If obji.innerText = strShow Then obji.innerText = strHidden End If Next End Function '================================================================================ 'If a section is collapsed, change to "hidden" in the printout (instead of "show"). '================================================================================ Function window_onafterprint() For Each obji In document.all If obji.className = "expando" Then If obji.innerText = strShown Then obji.innerText = strHide If obji.innerText = strHidden Then obji.innerText = strShow End If Next End Function '================================================================================ ' Adding keypress support for accessibility '================================================================================ Function document_onKeyPress() If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode = "10" Then 'space bar (32) or carriage return (13) or line feed (10) If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false If window.event.srcElement.className = "sectionTitle" Then Call document_onclick() : window.event.returnValue = false If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false End If End Function --> </script> <!-- Script 2 --> <script language="javascript"> <!-- function getExplainWindowTitle() { return document.getElementById("explainText_windowTitle").innerHTML; } function getExplainWindowStyles() { return document.getElementById("explainText_windowStyles").innerHTML; } function getExplainWindowSettingPathLabel() { return document.getElementById("explainText_settingPathLabel").innerHTML; } function getExplainWindowExplainTextLabel() { return document.getElementById("explainText_explainTextLabel").innerHTML; } function getExplainWindowPrintButton() { return document.getElementById("explainText_printButton").innerHTML; } function getExplainWindowCloseButton() { return document.getElementById("explainText_closeButton").innerHTML; } function getNoExplainTextAvailable() { return document.getElementById("explainText_noExplainTextAvailable").innerHTML; } function getExplainWindowSupportedLabel() { return document.getElementById("explainText_supportedLabel").innerHTML; } function getNoSupportedTextAvailable() { return document.getElementById("explainText_noSupportedTextAvailable").innerHTML; } function showExplainText(srcElement) { var strSettingName = srcElement.getAttribute("gpmc_settingName"); var strSettingPath = srcElement.getAttribute("gpmc_settingPath"); var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription"); if (strSettingDescription == "") { strSettingDescription = getNoExplainTextAvailable(); } var strSupported = srcElement.getAttribute("gpmc_supported"); if (strSupported == "") { strSupported = getNoSupportedTextAvailable(); } var strHtml = "<html>\n"; strHtml += "<head>\n"; strHtml += "<title>" + getExplainWindowTitle() + "</title>\n"; strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n"; strHtml += "</head>\n"; strHtml += "<body>\n"; strHtml += "<div class='head'>" + strSettingName +"</div>\n"; strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n"; strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n"; strHtml += "<div class='info'>\n"; strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n"; strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n"; strHtml += "<div class='btn'>"; strHtml += getExplainWindowPrintButton(); strHtml += getExplainWindowCloseButton(); strHtml += "</div></body></html>"; var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes "; var expWin = window.open("", "expWin", strDiagArgs); expWin.document.write(""); expWin.document.close(); expWin.document.write(strHtml); expWin.document.close(); expWin.focus(); //cancels navigation for IE. if(navigator.userAgent.indexOf("MSIE") > 0) { window.event.returnValue = false; } return false; } --> </script> </head> <body> <!-- HTML resources --> <div style="display:none;"> <div id="explainText_windowTitle">Group Policy Management</div> <div id="explainText_windowStyles"> body { font-size:68%;font-family:Tahoma; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:Tahoma; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:tahoma; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } } </div> <div id="explainText_settingPathLabel">Setting Path:</div> <div id="explainText_explainTextLabel">Explanation</div> <div id="explainText_printButton"> <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button> </div> <div id="explainText_closeButton"> <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button> </div> <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div> <div id="explainText_supportedLabel">Supported On:</div> <div id="explainText_noSupportedTextAvailable">Not available</div> </div><table class="title" cellpadding="0" cellspacing="0"> <tr><td colspan="2" class="gponame">UC - Domain</td></tr> <tr> <td id="dtstamp">Data collected on: 8/29/2003 3:15:45 PM</td> <td><div id="objshowhide" tabindex="0"></div></td> </tr> </table> <div class="gposummary"> <div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div> <div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><td scope="row">Domain</td><td>uc.berkeley.edu</td></tr> <tr><td scope="row">Owner</td><td>UC\Domain Admins</td></tr> <tr><td scope="row">Created</td><td>11/20/2001 4:45:42 PM</td></tr> <tr><td scope="row">Modified</td><td>5/13/2003 1:59:22 PM</td></tr> <tr><td scope="row">User Revisions</td><td>0 (AD), 0 (sysvol)</td></tr> <tr><td scope="row">Computer Revisions</td><td>42 (AD), 42 (sysvol)</td></tr> <tr><td scope="row">Unique ID</td><td>{4FB67FE8-3D61-4D72-90EE-EA78FC3A5CED}</td></tr> <tr><td scope="row">GPO Status</td><td>User settings disabled</td></tr> </table></div></div> <div class="filler"></div> <div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr> <tr><td>uc</td><td>No</td><td>Enabled</td><td>uc.berkeley.edu</td></tr> </table> <br/>This list only includes links in the domain of the GPO.</div></div> <div class="filler"></div> <div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div> <div class="he4i"> <table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table> </div> </div> <div class="filler"></div> <div class="he1"><span class="sectionTitle" tabindex="0">WMI Filtering</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><td scope="row"><b>WMI Filter Name</b></td><td>None</td></tr> <tr><td scope="row"><b>Description</b></td><td>Not applicable</td></tr> </table></div></div> <div class="filler"></div> <div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div> <div class="he4i"> <table class="info3" cellpadding="0" cellspacing="0"> <tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr> <tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr> <tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr> <tr><td>UC\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr> <tr><td>UC\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr> </table> </div></div></div> <div class="filler"></div> </div> <div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div> <div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Windows Settings</span><a class="expando" href="#"></a></div> <div class="container"><div class="he2"><span class="sectionTitle" tabindex="0">Security Settings</span><a class="expando" href="#"></a></div> <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Account Policies/Password Policy</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Enforce password history</td><td>2 passwords remembered</td></tr> <tr><td>Maximum password age</td><td>0 days</td></tr> <tr><td>Minimum password age</td><td>0 days</td></tr> <tr><td>Minimum password length</td><td>9 characters</td></tr> <tr><td>Password must meet complexity requirements</td><td>Enabled</td></tr> <tr><td>Store passwords using reversible encryption</td><td>Disabled</td></tr> </table> </div></div><div class="he3"><span class="sectionTitle" tabindex="0">Account Policies/Account Lockout Policy</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Account lockout duration</td><td>15 minutes</td></tr> <tr><td>Account lockout threshold</td><td>3 invalid logon attempts</td></tr> <tr><td>Reset account lockout counter after</td><td>15 minutes</td></tr> </table> </div></div><div class="he3"><span class="sectionTitle" tabindex="0">Account Policies/Kerberos Policy</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Enforce user logon restrictions</td><td>Enabled</td></tr> <tr><td>Maximum lifetime for service ticket</td><td>600 minutes</td></tr> <tr><td>Maximum lifetime for user ticket</td><td>10 hours</td></tr> <tr><td>Maximum lifetime for user ticket renewal</td><td>7 days</td></tr> <tr><td>Maximum tolerance for computer clock synchronization</td><td>5 minutes</td></tr> </table> </div></div><div class="he3"><span class="sectionTitle" tabindex="0">Local Policies/Security Options</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4h"><span class="sectionTitle" tabindex="0">Domain Member</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Domain member: Digitally encrypt secure channel data (when possible)</td><td>Enabled</td></tr> <tr><td>Domain member: Digitally sign secure channel data (when possible)</td><td>Enabled</td></tr> <tr><td>Domain member: Disable machine account password changes</td><td>Disabled</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Interactive Logon</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Interactive logon: Do not require CTRL+ALT+DEL</td><td>Disabled</td></tr> <tr><td>Interactive logon: Smart card removal behavior</td><td>Lock Workstation</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Microsoft Network Client</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Microsoft network client: Digitally sign communications (if server agrees)</td><td>Enabled</td></tr> <tr><td>Microsoft network client: Send unencrypted password to third-party SMB servers</td><td>Disabled</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Microsoft Network Server</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Microsoft network server: Amount of idle time required before suspending session</td><td>30 minutes</td></tr> <tr><td>Microsoft network server: Digitally sign communications (if client agrees)</td><td>Enabled</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Network Access</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Network access: Do not allow anonymous enumeration of SAM accounts and shares</td><td>Enabled</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Network Security</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Network security: Force logoff when logon hours expire</td><td>Enabled</td></tr> <tr><td>Network security: LAN Manager authentication level</td><td>Send NTLMv2 response only\refuse LM &amp; NTLM</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Shutdown</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Shutdown: Clear virtual memory pagefile</td><td>Enabled</td></tr> </table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Other</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Kerberos: BERKELEY.EDU realm Change Password Protocol Servers (UCB)</td><td>kerberos.berkeley.edu</td></tr> <tr><td>Kerberos: BERKELEY.EDU realm KDC servers (UCB)</td><td>kerberos.berkeley.edu, kerberos-1.berkeley.edu</td></tr> <tr><td>Network security: DoS: Computer does not release its NetBIOS name when it receives a name-release request from the network (UCB)</td><td>Enabled</td></tr> <tr><td>Network security: DoS: Controls whether Windows 2000 will alter its route table in response to ICMP redirect messages (UCB)</td><td>Enabled</td></tr> <tr><td>Network security: DoS: How often TCP attempts to verify that an idle connection is still intact by sending a keep-alive packet (UCB)</td><td>300000</td></tr> <tr><td>Network security: DoS: Syn attack protection (UCB)</td><td>Reduced retransmission retries &amp; delayed RCE creation &amp; delayed indication to Winsock</td></tr> <tr><td>Network security: DoS: TCP attempts to discover the MTU over the path to a remote host (UCB)</td><td>Enabled</td></tr> <tr><td>Network security: DoS: TCP is allowed to perform dead-gateway detection (UCB)</td><td>Disabled</td></tr> <tr><td>Network security: Minimum session security for NTLM SSP based (including secure RPC) clients</td><td>Enabled</td></tr> <tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0"><tr><td>Require message integrity</td><td>Enabled</td></tr> <tr><td>Require message confidentiality</td><td>Enabled</td></tr> <tr><td>Require NTLMv2 session security</td><td>Enabled</td></tr> <tr><td>Require 128-bit encryption</td><td>Enabled</td></tr> </table></td></tr><tr><td>Network security: Minimum session security for NTLM SSP based (including secure RPC) servers</td><td>Enabled</td></tr> <tr><td colspan="2"><table class="subtable" cellpadding="0" cellspacing="0"><tr><td>Require message integrity</td><td>Enabled</td></tr> <tr><td>Require message confidentiality</td><td>Enabled</td></tr> <tr><td>Require NTLMv2 session security</td><td>Enabled</td></tr> <tr><td>Require 128-bit encryption</td><td>Enabled</td></tr> </table></td></tr></table> </div></div><div class="he4h"><span class="sectionTitle" tabindex="0">Registry Values</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Domains\BERKELEY.EDU\RealmFlags</td><td>8</td></tr> <tr><td>MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\NoLMHash\NOP</td><td>1</td></tr> </table> </div></div></div><div class="he3"><span class="sectionTitle" tabindex="0">Event Log</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td>Prevent local guests group from accessing application log</td><td>Enabled</td></tr> <tr><td>Prevent local guests group from accessing security log</td><td>Enabled</td></tr> <tr><td>Prevent local guests group from accessing system log</td><td>Enabled</td></tr> </table> </div></div></div></div><div class="filler"></div> <div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div> <div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">System/DNS Client</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0"> <tr><th scope="col">Policy</th><th scope="col">Setting</th></tr> <tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Disable Dynamic Update" gpmc_settingPath="Computer Configuration/Administrative Templates/System/DNS Client" gpmc_settingDescription="Stops the client from dynamically registering all adapters with DNS.&lt;br/&gt;&lt;br/&gt;When this setting is enabled it changes the DisableDynamicUpdate value to 1 in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters&lt;br/&gt;&lt;br/&gt;When this setting is disabled, the value is set back to its default of zero. Note that when the policy is disabled, the registry value may be deleted from the registry.&lt;br/&gt;&lt;br/&gt;See Q246804 for more details." gpmc_supported="">Disable Dynamic Update</a></td><td>Enabled</td></tr> </table> </div></div></div></div> <div class="filler"></div> <div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Disabled)</span><a class="expando" href="#"></a></div> <div class="container"><div class="he4i">No settings defined.</div></div> </body></html>