Leaked source code of windows server 2003
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

97 lines
2.8 KiB

  1. ; Copyright (c) Microsoft Corporation. All rights reserved.
  2. ;
  3. ; Security Configuration Template for Security Configuration Editor
  4. ;
  5. ; Template Name: DCFirst.INF
  6. ; Template Version: 05.00.DF.0000
  7. ;
  8. ; Contains Default Policy Settings for Windows NT 5.0 Domain Controller.
  9. ; This template is NOT used by SCE during setup
  10. ; This template is applied via GP during Winlogon for the first DC in a Tree
  11. ; This template should NOT be used on Workstations or Servers.
  12. ;
  13. ; Please DO NOT EDIT version section.
  14. ;
  15. [version]
  16. signature="$CHICAGO$"
  17. revision=1
  18. [Kerberos Policy]
  19. ; in hours
  20. MaxTicketAge=10
  21. ; in days
  22. MaxRenewAge=7
  23. ; in minutes
  24. MaxServiceAge=600
  25. ; in minutes
  26. MaxClockSkew=5
  27. ; enforce user logon restrictions = yes
  28. TicketValidateClient=1
  29. ;----------------------------------------------------------------------
  30. ; Restricted Groups
  31. ;----------------------------------------------------------------------
  32. [Group Membership]
  33. ;Accounts Created During Server Role are Maintained so ignore groups.
  34. ;Operational Groups
  35. ;%SceInfBackupOp%__Memberof =
  36. ;%SceInfBackupOp%__Members =
  37. ;%SceInfGuests%__Memberof =
  38. ;%SceInfPrintOp%__Members =
  39. ;%SceInfReplicator%__Memberof =
  40. ;%SceInfReplicator%__Members =
  41. ;%SceInfServerOp%__Memberof =
  42. ;%SceInfServerOp%__Members =
  43. ;Account Groups
  44. ;%SceInfAccountOp%__Memberof =
  45. ;%SceInfAccountOp%__Members =
  46. ;%SceInfAdmins%__Memberof =
  47. ;%SceInfAdmins%__Members = %SceInfAdministrator%, %SceInfDomainAdmins%
  48. ;%SceInfDomainAdmins%__Memberof =
  49. ;%SceInfDomainAdmins%__Members = %SceInfAdministrator%
  50. ;%SceInfDomainGuests%__Memberof =
  51. ;%SceInfDomainGuests%__Members = %SceInfGuest%
  52. ;%SceInfDomainUsers%__Memberof =
  53. ;%SceInfDomainUsers%__Members = %SceInfAdministrator%
  54. ;%SceInfUsers%__Memberof =
  55. ;%SceInfUsers%__Members = %SceInfDomainUsers%
  56. ;%SceInfGuests%__Members = %SceInfDomainGuests%
  57. ;%SceInfPrintOp%__Memberof =
  58. [System Access]
  59. ;----------------------------------------------------------------
  60. ;Account Policies - Password Policy
  61. ;----------------------------------------------------------------
  62. MinimumPasswordAge = 1
  63. MaximumPasswordAge = 42
  64. MinimumPasswordLength = 7
  65. PasswordComplexity = 1
  66. PasswordHistorySize = 24
  67. RequireLogonToChangePassword = 0
  68. ClearTextPassword = 0
  69. ;----------------------------------------------------------------
  70. ;Account Policies - Lockout Policy
  71. ;----------------------------------------------------------------
  72. ;No Account Lockout
  73. LockoutBadCount = 0
  74. ;The following are not configured when No Account Lockout
  75. ;ResetLockoutCount = 30
  76. ;LockoutDuration = 30
  77. ;----------------------------------------------------------------
  78. ;Local Policies - Security Options
  79. ;----------------------------------------------------------------
  80. ;DC Only
  81. ForceLogoffWhenHourExpire = 0
  82. ;NewAdministatorName =
  83. ;NewGuestName =
  84. ;SecureSystemPartition