IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
95 along with a user and a computer via the system guidelines, otherwise the
same restrictions will apply as for a standard user. The password may only be
made known to the administrator and his substitute.
In any case, this guideline must be saved in the CONFIG.POL file.
4. Defining guidelines for single users based on a standard user and a
standard computer
If users are required whose restrictions should differ from those specified
under 1., the guidelines are the same as for 1. but must additionally be set up
in the CONFIG.POL file. The standard profile is copied, the name of the user
concerned will then be given to the profile and the restrictions are set as
described under 1.
5. Activating the guidelines
When the administrator sets up the system guidelines, particular care and
attention must be given as inconsistent system conditions can easily be set
which hinder work with the computer. The operating system would have to be
re-installed. Therefore the system guidelines should only be activated once
they have been defined with utmost care.
For this purpose, the administrator must open the local registry with the
system guideline editor (POLEDIT.EXE) and the switch REMOTE-UPDATE
for the LOCAL COMPUTER under the option NETWORK-UPDATE must be
switched on. INTERACTIVE must be selected as update-mode. The path for
the CONFIG.POL as described above must also be defined.
Highly experienced administrators can carry out the necessary settings with
the registry editor (program REGEDIT.EXE).
Furthermore, the user profiles must be activated under the option
PASSWORDS in the program group CONTROL PANEL.
Additional controls:
- From operational point of view, is restriction of the user environment
necessary?
- Is it necessary to restrict certain resources?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000