Список групповых политик, чаще всего используемых в работе системного администратора.
Управление учетными записями
Windows Settings - Security Settings-Account Policies/Password Policy
- Enforce password history 24 passwords remembered
- Maximum password age 42 days
- Minimum password age 2 days
- Minimum password length 8 characters
- Password must meet complexity requirements Enabled
- Store passwords using reversible encryption Disabled
Windows Settings - Security Settings-Account Policies/Account Lockout Policy
- Account lockout threshold 0 invalid logon attempts
Обновление Windows
Windows Settings - Administrative Templates - Windows Components/Windows Update
- Configure Automatic Updates Disabled
- No auto-restart for scheduled Automatic Updates installations Enabled
- Specify intranet Microsoft update service location Enabled
- Set the intranet update service for detecting updates: http://wsus
- Set the intranet statistics server: http://wsus
Ограничение выполнения программ
Windows Settings - Security Settings - Software Restriction Policies/Additional Rules - Path Rules
- %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%
- %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\*.exe
- %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRoot%\System32\*.exe
- %HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir%
Добавить комментарий