Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-21 23:51:44 -05:00
Code

Add additional security options

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2024-04-25 23:34:02 -07:00
parent dd77093efe
commit c76835ff6a
Signed by: Tomster
GPG Key ID: 555C902A34EC968F
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
Group Policies Objects/Default Domain Policy/Security Options.md
View File

@ -6,11 +6,16 @@ Documentation: https://learn.microsoft.com/en-us/windows/security/application-se
(**Follow this guide to setup LDAPS if you do not have key server: https://www.dvolve.net/blog/2019/12/using-lets-encrypt-for-active-directory-domain-controller-certificates/**) (**Follow this guide to setup LDAPS if you do not have key server: https://www.dvolve.net/blog/2019/12/using-lets-encrypt-for-active-directory-domain-controller-certificates/**)
- Accounts: Block Microsoft accounts -> Users can't add or log on with Microsoft accounts
- Accounts: Guest account status -> Disabled
- Devices: Prevent users from installing printer drivers -> Enabled
- Domain controller: LDAP server signing requirements: Require signing - Domain controller: LDAP server signing requirements: Require signing
- Domain controller: LDAP server channel binding token requirements: Always - Domain controller: LDAP server channel binding token requirements: Always
- Domain member: Digitally encrypt or sign secure channel data (always) -> Enabled - Domain member: Digitally encrypt or sign secure channel data (always) -> Enabled
- Domain member: Require strong (Windows 2000 or later) session key -> Enabled
- Microsoft network client: Digitally sign communications (always) -> Enabled - Microsoft network client: Digitally sign communications (always) -> Enabled
- Microsoft network server: Digitally sign communications (always) -> Enabled - Microsoft network server: Digitally sign communications (always) -> Enabled
- Network access: Allow anonymous SID/Name translation -> Disabled
- Network security: LDAP client signing requirements: Require signing - Network security: LDAP client signing requirements: Require signing
- Shutdown: Clear virtual memory pagefile -> Enabled - Shutdown: Clear virtual memory pagefile -> Enabled
- User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop -> Disabled - User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop -> Disabled