MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

16-32 Chapter 16 Configuring Security Settings and Internet Options
Table 16-5 Important Security Options in Windows XP Professional
Security Option Description
Audit: Audit The Use Of
Backup And Restore
Privilege
Devices: Prevent Users
From Installing Printer
Drivers
Devices: Restrict
CD-Rom Access To
Locally Logged On
User Only
Devices: Restrict Floppy
Access To Locally
Logged On User Only
Devices: Unsigned Driver
Installation Behavior
Interactive Logon: Do Not
Display Last User Name
Interactive Logon: Do Not
Require CTRL+ALT+DEL
Interactive Logon: Message
Text For Users Attempting
To Log On
Interactive Logon: Prompt
User To Change Password
Before Expiration
Network Access: Let
Everyone Permissions
Apply To Anonymous Users
Network Access: Shares
That Can Be Accessed
Anonymously
Recovery Console: Allow
Automatic Administrative
Logon
Determines whether to audit the use of all user privileges, including
Backup and Restore, when the Audit privilege use setting is in
effect. Enabling both policies generates an audit event for every
file that is backed up or restored. See Lesson 5 for more information
on auditing.
Enabling this setting allows only Administrators and Power
Users to install a printer driver as part of adding a network
printer. Disabling this setting allows any user to install a printer
driver as part of adding a network printer.
Determines whether a CD-ROM is accessible to both local and
remote users simultaneously. Enabling this setting allows only
the interactively logged-on user to access removable CD-ROM
media. If this setting is enabled and no one is logged on interactively,
the CD-ROM can be accessed over the network.
Determines whether removable floppy media are accessible to
both local and remote users simultaneously.
Determines what happens when an attempt is made to install a
device driver that has not been digitally signed. You can configure
Windows to allow unsigned drivers, to allow unsigned drivers
but warn the user, or to not allow unsigned drivers.
Determines whether the Log On To Windows dialog box displays
the name of the last user to log on to the computer.
Determines whether pressing CTRL+ALT+DEL is required before a
user can log on.
Specifies a text message displayed to users when they log on.
Determines how many days in advance users are warned that
their password is about to expire.
Determines whether anonymous users receive the same permissions
to resources that are assigned to the Everyone group.
Determines which network shares anonymous users can access.
When you enable this option, you generate the list of shares that
are accessible.
Determines whether the Administrator account password must
be given before access to the computer is granted in Recovery
Console. Enabling this setting automatically logs on to the system
in Recovery Console without requiring a password.