19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Safeguard Catalogue - Hardware & Software Remarks<br />

____________________________________________________________________ .........................................<br />

User (group) Access right<br />

SYSTEM Full access<br />

Administrators Full access<br />

Creator/Owner Change<br />

Users List<br />

As from version 4.0, the standard rights are:<br />

(+<br />

User (group) Access right<br />

SYSTEM Full access<br />

Administrators Full access<br />

Creator/Owner Full access<br />

Everyone List<br />

However, the group titled "Everyone" should be replaced by the group titled<br />

"Users". Only if guests have access to this directory, should the group titled<br />

"Everyone" be assigned the permission titled "List".<br />

During installation, Windows NT creates the directory %SystemRoot\REPAIR<br />

for the purpose of storing configuration information which might be required<br />

for repairing an existing installation. <strong>The</strong>se files are updated with the help of<br />

the RDISK utility program (also refer to S 6.42 Creating start-up disks for<br />

Windows NT). As these files, together with disruptive software, can be used to<br />

disable the security features of Windows NT, rights to access this directory<br />

and all the files contained therein should be set as follows:<br />

Profiles<br />

User (group) Access right<br />

System Full access<br />

Administrators Full access<br />

In order to store the data which the user interface and entries in the START<br />

menu describe from version 4.0 onwards, Windows NT creates a personal<br />

profile directory for each user of the system in the sub-directory Profiles of<br />

the Windows directory %SystemRoot% (generally C:\WINNT\PROFILE).<br />

Under version 3.51, profiles are stored in sub-directories of the system<br />

directory %SystemRoot%\SYSTEM32\CONFIG or in directories explicitly<br />

specified for individual users.<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!