Ultimately each site must tailor its password policy to its own risks. This guideline offers recommendations toward this end. It also advocates removing access to such programs from critical administrators unless the programs are thoroughly trustworthy. Common Application Directories, Home and Application Directories. System Policy Files System Policy Files are a Windows NT feature that lets administrators centrally control the basic appearance of the user's desktop environment.
Administrators can set up central policies that apply to different groups of users and workstations.
For some level, the guidelines recommend setting up a simple, basic policy file, even though relatively few system security policies are of significant security strength. For example, the ability to set the system time and date is a Right. As installed, the Windows NT Rights policy is prudent. This guideline recommends a few small changes to enhance security. The Windows NT security log can collect a variety of detailed, security relevant events into managed collection files, and administrators have considerable latitude over which events are saved.