Windows Explorer, Current User Hide drives in My Computer Registry key not Windows Explorer, Current User Hide Network Neighborhood Registry key not Windows Explorer, Current User Hide Start menu subfolders Registry key not Windows Explorer, Current User Only use approved shell extensions Registry key not Windows Explorer, Current User Remove common program groups from Start menu Registry key not Windows Explorer, Current User Remove File menu from Explorer Registry key not found Windows Explorer, Current User Remove Find command from menu Registry key not Windows Explorer, Current User Remove folders from Settings on menu Registry key not found Windows Explorer, Current User Remove Run command from Start menu Registry key not found Windows Explorer, Current User Remove Taskbar from Settings on Start menu Registry key not found Windows Explorer, Current User Remove the "Map Network Drive" and "Disconnect Network Drive" options Registry key not found Windows Explorer, Current User Remove Tools, GoTo menu from Explorer Registry key not found Windows Explorer, Current User Remove View Options menu from Explorer Registry key not found Windows Explorer, Current User Run only allowed Windows applications Registry key not found NOTE: The list of registry values is provided for information purposes and as an aid in the evaluation of security and other settings for the system being analysed. Registry key not found = the registry key was not defined on the system. In many cases, a default setting is adopted for the feature. For many registry keys a value of ‘0’ means that the feature is not enabled and a value of ‘1’ or greater means enabled. Implications The correct settings of certain registry keys will enhance security, auditing and management on the system. For example, having appropriate values for “remote access” will decrease the risk of intruders gaining illegal access to the system. Risk Rating Low to high. (Dependant on the registry setting being considered). Recommended Action Ensure that registry values are set to appropriate values where applicable. User Accounts Defined On Your System
Allow log on locally AdminNew Administrators log on through Terminal Services AdminNew Administrators Local Allow log on through Terminal Services (Effective) AdminNew Administrators Local Backup files and directories AdminNew Administrators Local Bypass traverse checking AdminNew Administrators Local Change the system time AdminNew Administrators Local Create a page file AdminNew Administrators Local Create global objects AdminNew Administrators Local Debug programs AdminNew Administrators Local Deny access to this computer from the network SUPPORT_388945a0 None N/A Yes Deny user from logging on locally SUPPORT_388945a0 None N/A Yes Force shutdown from a remote system AdminNew Administrators Local Impersonate a Client after authentication AdminNew Administrators Local Increase scheduling priority AdminNew Administrators Local Load and unload device drivers AdminNew Administrators Local Log on as a job SUPPORT_388945a0 None N/A Yes Log on as a job (Effective) SUPPORT_388945a0 None N/A Yes Log on locally (Effective) AdminNew Administrators Local Manage auditing and security log AdminNew Administrators Local Modify firmware environment values AdminNew Administrators Local Perform volume maintenance AdminNew Administrators Local Profile single process AdminNew Administrators Local Profile system performance AdminNew Administrators Local Remove computer from docking station AdminNew Administrators Local Restore and directories AdminNew Administrators Shut down the system AdminNew Administrators Local Take ownership of files or other objects AdminNew Administrators Local Grouped by User Account
User Account Right Group Name (Member) Group Type Disabled AdminNew Access this computer from the network Administrators Local Access this computer from the network (Effective) Administrators Adjust memory quotas for a process Administrators Allow log on locally Administrators Local Allow log on through Terminal Services Administrators Local Allow log on through Terminal Services (Effective) Administrators Local Backup files and directories Administrators Local Bypass traverse checking Administrators Local Change the system time Administrators Local Create a page file Administrators Create global objects Administrators Local Debug programs Administrators Local Force shutdown from a remote system Administrators Local Impersonate a Client after authentication Administrators Increase scheduling priority Administrators Local Load and unload device drivers Administrators Local Log on locally (Effective) Administrators Manage auditing and security log Administrators Modify firmware environment values Administrators Local Perform volume maintenance tasks Administrators Local Profile single process Administrators Local Profile system performance Administrators Local Remove computer from docking station Administrators Local Restore files and directories Administrators Shut down the system Administrators Local Take ownership of or other objects Administrators Local SUPPORT_388945a0 Deny access to this computer from the network None N/A Yes