Configure ‘Accounts: Rename administrator account’
Details The built-in local administrator account is a well-known account name that attackers will target. It is recommended to choose...
- Home
- Security Hardening
- CIS Windows 7 Workstation L1 BitLocker V3 2.0
CIS Windows 7 Workstation L1 BitLocker V3 2.0
Configure ‘Create symbolic links’
Details This policy setting determines which users can create symbolic links. In Windows Vista, existing NTFS file system objects, such...Ensure ‘Access Credential Manager as a trusted caller’ is set to ‘No One’
Details This security setting is used by Credential Manager during Backup and Restore. No accounts should have this user right,...Ensure ‘Access this computer from the network’ is set to ‘Administrators, Remote Desktop Users’
Details This policy setting allows other users on the network to connect to the computer and is required by various...Ensure ‘Account lockout duration’ is set to ’15 or more minute(s)’
Details This policy setting determines the length of time that must pass before a locked account is unlocked and a...Ensure ‘Account lockout threshold’ is set to ’10 or fewer invalid logon attempt(s), but not 0′
Details This policy setting determines the number of failed logon attempts before the account is locked. Setting this policy to...Ensure ‘Accounts: Administrator account status’ is set to ‘Disabled’
Details This policy setting enables or disables the Administrator account during normal operation. When a computer is booted into safe...Ensure ‘Accounts: Guest account status’ is set to ‘Disabled’
Details This policy setting determines whether the Guest account is enabled or disabled. The Guest account allows unauthenticated network users...Ensure ‘Accounts: Limit local account use of blank passwords to console logon only’ is set to ‘Enabled’
Details This policy setting determines whether local accounts that are not password protected can be used to log on from...Ensure ‘Act as part of the operating system’ is set to ‘No One’
Details This policy setting allows a process to assume the identity of any user and thus gain access to the...