windows-nt/Source/XPSP1/NT/mergedcomponents/setupinfs/dcfirst.inx
2020-09-26 16:20:57 +08:00

98 lines
2.7 KiB
Plaintext

; (c) Microsoft Corporation 1997-2000
;
; Security Configuration Template for Security Configuration Editor
;
; Template Name: DCFirst.INF
; Template Version: 05.00.DF.0000
;
; Contains Default Policy Settings for Windows NT 5.0 Domain Controller.
; This template is NOT used by SCE during setup
; This template is applied via GP during Winlogon for the first DC in a Tree
; This template should NOT be used on Workstations or Servers.
;
; Please DO NOT EDIT version section.
;
[version]
signature="$CHICAGO$"
revision=1
[Kerberos Policy]
; in hours
MaxTicketAge=10
; in days
MaxRenewAge=7
; in minutes
MaxServiceAge=600
; in minutes
MaxClockSkew=5
; enforce user logon restrictions = yes
TicketValidateClient=1
;----------------------------------------------------------------------
; Restricted Groups
;----------------------------------------------------------------------
[Group Membership]
;Accounts Created During Server Role are Maintained so ignore groups.
;Operational Groups
;%SceInfBackupOp%__Memberof =
;%SceInfBackupOp%__Members =
;%SceInfGuests%__Memberof =
;%SceInfPrintOp%__Members =
;%SceInfReplicator%__Memberof =
;%SceInfReplicator%__Members =
;%SceInfServerOp%__Memberof =
;%SceInfServerOp%__Members =
;Account Groups
;%SceInfAccountOp%__Memberof =
;%SceInfAccountOp%__Members =
;%SceInfAdmins%__Memberof =
;%SceInfAdmins%__Members = %SceInfAdministrator%, %SceInfDomainAdmins%
;%SceInfDomainAdmins%__Memberof =
;%SceInfDomainAdmins%__Members = %SceInfAdministrator%
;%SceInfDomainGuests%__Memberof =
;%SceInfDomainGuests%__Members = %SceInfGuest%
;%SceInfDomainUsers%__Memberof =
;%SceInfDomainUsers%__Members = %SceInfAdministrator%
;%SceInfUsers%__Memberof =
;%SceInfUsers%__Members = %SceInfDomainUsers%
;%SceInfGuests%__Members = %SceInfDomainGuests%
;%SceInfPrintOp%__Memberof =
[System Access]
;----------------------------------------------------------------
;Account Policies - Password Policy
;----------------------------------------------------------------
MinimumPasswordAge = 0
MaximumPasswordAge = 42
MinimumPasswordLength = 0
PasswordComplexity = 0
PasswordHistorySize = 1
RequireLogonToChangePassword = 0
ClearTextPassword = 0
;----------------------------------------------------------------
;Account Policies - Lockout Policy
;----------------------------------------------------------------
;No Account Lockout
LockoutBadCount = 0
;The following are not configured when No Account Lockout
;ResetLockoutCount = 30
;LockoutDuration = 30
;----------------------------------------------------------------
;Local Policies - Security Options
;----------------------------------------------------------------
;DC Only
ForceLogoffWhenHourExpire = 0
;NewAdministatorName =
;NewGuestName =
;SecureSystemPartition