This automatic log off policy can be implemented to minimize the likelihood that an unauthorized individual may access the workstation

This policy disables the Print Screen key.

This policy prevents users from connecting to USB storage devices.

This policy prevents write operations to USB block storage devices, such as memory sticks.

This sample policy demonstrates how you can ensure that a file can only be accessed by authorized users.

This sample policy demonstrates how you can ensure that Electronic Protected Health Information (ePHI) can only be accessed by authorized users.

Use this policy to configure the system audit settings consistent with the NIST recommendations for Windows XP.

This policy assures that User Rights Assignments are consistent with the NIST recommendations.

This policy assures compliance with the NIST recommendation that computers should be configured to shut down immediately when security events cannot be written to the Security log file.

This policy assures compliance with the NIST recommendation for the use of FIPS (Federal Information Processing Standards ) compliant algorithms for encryption, hashing, and signing in Windows XP High Security environments.

This policy assures that Devices settings are consistent with the NIST recommendations for strengthening Devices security options to achieve greater security than the default settings provide.

This policy assures that Domain member settings are consistent with the NIST recommendations for strengthening Domain member security options to achieve greater security than the default settings provide.

This policy assures that Microsoft network client settings are consistent with the NIST recommendations for strengthening Microsoft network client security options to achieve greater security than the default settings provide.

This policy assures that Microsoft network server settings are consistent with the NIST recommendations for strengthening Microsoft network server security options to achieve greater security than the default settings provide.

This policy assures that the network access settings are consistent wiclass="style" th the NIST recommendations for restricting which types of network access may be performed, in order to achieve greater security than the default settings provide.

This policy assures that the network security settings are consistent with the NIST recommendations for strengthening the network security settings, in order to achieve greater security than the default settings provide.

This policy assures that Recovery console settings are consistent with the NIST recommendations for strengthening Recovery console security options to achieve greater security than the default settings provide.

This policy assures that the System objects settings are consistent with the NIST recommendations for strengthening System objects security options to achieve greater security than the default settings provide.

This policy assures that the interactive logon settings are consistent with the NIST recommendations.

This policy assures that shutdown settings are consistent with the NIST recommendations.

This policy assures that this setting is enabled, consistent with the NIST recommendation.

This policy assures that the Event Log settings are consistent with the NIST recommendations.

This policy removes all users from the Remote Desktop Users and Power Users groups.

This policy disables and secures the services that the NIST guidance indicates are unnecessary for Windows XP.

This security policy restricts access to 26 operating system executables, protecting them from unauthorized modification and usage.

This security policy restricts access to these critical registry keys.

This policy disables the Dr. Watson program debugger, and disables creation of the Dr. Watson memory dump file.

This policy assures that the automatic logon feature is disabled.

This policy assures that the automatic reboot feature is disabled.

This policy assures that the automatic execution of CD-ROM content is disabled.

This policy assures that the Microsoft TCP/IP stack settings are configured to be consistent with the NIST recommendations.

This policy assures that the networking settings are consistent with the NIST recommendations.

This automatic log off policy can be implemented to minimize the likelihood that an unauthorized individual may access the workstation

This policy disables the Print Screen key.

This policy prevents users from connecting to USB storage devices.

This policy prevents write operations to USB block storage devices, such as memory sticks.

This policy stops users from logging in to the computer from remote machines.

This sample policy demonstrates how you can ensure that a file can only be accessed by authorized users.

This sample policy demonstrates how you can ensure that a folder can only be accessed by authorized users.

This sample policy demonstrates how you can ensure that Electronic Protected Health Information (ePHI) can only be accessed by authorized users.

This policy disables the Computer Browser Service.

This policy stops your computers from reporting error information to Microsoft when an application crashes.

IIS should not be operational unless the computer has the "IIS Server" role.

This policy stops the Microsoft Messenger Service from popping up broadcast messages on your computers. This is not related to the MSN Messenger Instant Messaging program.

This policy stops users from connecting to a computers registry from a remote machine.

This policy turns off the Remote Procedure Call (RPC) Service (a service that allows remote computers to programmatically execute commands on client machines).

This policy stops the Task Scheduler Service from launching applications at scheduled times.

This policy disables the TCP/IP NetBIOS Helper Service (a service that is typically only necessary if your network still uses the Windows Internet Name Service (WINS) protocol).

This turns off a service which provides support for file and print serving as well as RPC.

This policy disables the "automatic update" feature of Windows Update.

This policy turns off automatic configuration of Wi-Fi connections.

Use this policy to configure the system audit settings consistent with the NIST recommendations for Windows XP.

This policy assures that User Rights Assignments are consistent with the NIST recommendations.

This policy assures compliance with the NIST recommendation that computers should be configured to shut down immediately when security events cannot be written to the Security log file.

This policy assures compliance with the NIST recommendation for the use of FIPS (Federal Information Processing Standards ) compliant algorithms for encryption, hashing, and signing in Windows XP High Security environments.

This policy assures that Devices settings are consistent with the NIST recommendations for strengthening Devices security options to achieve greater security than the default settings provide.

This policy assures that Domain member settings are consistent with the NIST recommendations for strengthening Domain member security options to achieve greater security than the default settings provide.

This policy assures that Microsoft network client settings are consistent with the NIST recommendations for strengthening Microsoft network client security options to achieve greater security than the default settings provide.

This policy assures that Microsoft network server settings are consistent with the NIST recommendations for strengthening Microsoft network server security options to achieve greater security than the default settings provide.

This policy assures that the network access settings are consistent with the NIST recommendations for restricting which types of network access may be performed, in order to achieve greater security than the default settings provide.

This policy assures that the network security settings are consistent with the NIST recommendations for strengthening the network security settings, in order to achieve greater security than the default settings provide.

This policy assures that Recovery console settings are consistent with the NIST recommendations for strengthening Recovery console security options to achieve greater security than the default settings provide.

This policy assures that the System objects settings are consistent with the NIST recommendations for strengthening System objects security options to achieve greater security than the default settings provide.

This policy assures that the interactive logon settings are consistent with the NIST recommendations.

This policy assures that shutdown settings are consistent with the NIST recommendations.

This policy assures that this setting is enabled, consistent with the NIST recommendation.

This policy assures that the Event Log settings are consistent with the NIST recommendations.

This policy removes all users from the Remote Desktop Users and Power Users groups.

This policy disables and secures the services that the NIST guidance indicates are unnecessary for Windows XP.

This security policy restricts access to 26 operating system executables, protecting them from unauthorized modification and usage.

This security policy restricts access to these critical registry keys.

This policy disables the Dr. Watson program debugger, and disables creation of the Dr. Watson memory dump file.

This policy assures that the automatic logon feature is disabled.

This policy assures that the automatic reboot feature is disabled.

This policy assures that the automatic execution of CD-ROM content is disabled.

This policy assures that the Microsoft TCP/IP stack settings are configured to be consistent with the NIST recommendations.

This policy assures that the networking settings are consistent with the NIST recommendations.

This policy introduces the Windows 2000 Professional security baseline that is based on the recommendations made by a NIST, NSA, DISA, SANS, and CIS and reviewed by GSA.

This policy introduces the Windows 2000 Professional security baseline that is based on the recommendations made by a NIST, NSA, DISA, SANS, and CIS and reviewed by GSA.

NSA Enhanced Security for Windows 2000 Domain Controllers.

NSA Enhanced Security for Windows 2000 Member/Stand-alone Servers.

NSA Enhanced Security for Windows 2000 Member/Stand-alone Workstations.

NSA Enhanced Security for Windows XP Member/Stand-alone Workstations.

This policy provides settings to support the Evaluated Configuration of Windows 2000 under the Common Criteria (CC) for Information Technology Security Evaluation.

This policy provides settings for high security computers to support the Evaluated Configuration of Windows 2000 under the Common Criteria (CC) for Information Technology Security Evaluation.

This Security Configuration Template provides settings to support the Windows 2000 Server domain-controller security settings for the Securing Windows 2000 Server Solution Guide.

This Security Configuration Template provides settings to support the Windows 2000 Server File-Server or Print-Server security settings for the Securing Windows 2000 Server Solution Guide.

This Security Configuration Template provides settings to support the Windows 2000 Server IIS Server security settings for the Securing Windows 2000 Server Solution Guide.

This Security Configuration Template provides settings to support the Windows 2000 Server Infrastructure Server security settings for the Securing Windows 2000 Server Solution Guide.

This Security Configuration Template provides settings to support the Windows 2000 Server base security settings for the Securing Windows 2000 Server Solution Guide.

This Security Configuration Template provides settings to support the Windows 2000 Server File-Server or Print-Server security settings for the Securing Windows 2000 Server Solution Guide.

This policy provides incremental settings for a Certificate Services Server in an environment with only Windows 2000 or Windows XP clients.

This policy provides settings for a Domain Controller in an environment with only Windows 2000 or Windows XP clients.

This policy provides incremental settings for a File Server in an environment with only Windows 2000 or Windows XP clients.

This policy provides incremental settings for an IAS Server in an environment with only Windows 2000 or Windows XP clients.

This policy provides incremental settings for an IIS Server in an environment with only Windows 2000 or Windows XP clients.

This policy provides incremental settings for an Infrastructure Server in an environment with only Windows 2000 or Windows XP clients.

This policy provides baseline settings for all Member Servers in an environment with only Windows 2000 or Windows XP clients.

This policy provides incremental settings for a Print Server in an environment with only Windows 2000 or Windows XP clients.

This policy provides settings for a Bastion Host server.

This policy provides settings for a Domain Controller in an environment with high security requirements.

This policy provides incremental settings for a File Server in an environment with high security requirements.

This policy provides incremental settings for an IIS Server in an environment with high security requirements.

This policy provides incremental settings for an Infrastructure Server in an environment with high security requirements.

This policy provides baseline settings for all Member Servers in an environment with high security requirements.

This policy provides incremental settings for a Print Server in an environment with high security requirements.

This policy provides settings for a Domain Controller in an environment with legacy clients.

This policy provides incremental settings for a File Server in an environment with legacy clients.

This policy provides incremental settings for an IIS Server in an environment with legacy clients.

This policy provides incremental settings for an Infrastructure Server in an environment with legacy clients.

This policy provides baseline settings for all Member Servers in an environment with legacy clients.

This policy provides incremental settings for a Print Server in an environment with legacy clients.

Enterprise client settings for Windows XP desktop computers.

Enterprise client settings for Windows XP laptop computers.

High Security Settings for Windows XP desktop computers.

High security settings for Windows XP laptop computers.