1. SIM304

6. Location Security Settings | Local Policies | User Rights Assignment Setting nameDebug programs DefaultAdministrators (Mis)guidance[no one]

10. demo

11. Location Computer Configuration | Administrative Templates | System | Internet Communication Management | Internet Communication settings Setting nameTurn off Automatic Root Certificates Update DefaultNot configured (equivalent to Disabled) (Mis)guidance?Enabled

16. demo

17. Location User Configuration | Administrative Templates | Windows Components | Attachment Manager Setting nameHide mechanisms to remove zone information DefaultNot configured (equivalent to Disabled) (Mis)guidanceEnabled

23. demo No! UAC elevation is not a security boundary! WTF??? Show me! WTF??? Show me! UAC elevation is safe if you have to enter a password, isn’t it?

25. Location Computer Configuration | Administrative Templates | Windows Components | Credential User Interface Setting nameRequire trusted path for credential entry DefaultNot configured (equivalent to Disabled) Ex-guidanceEnabled (USGCB “Alpha” – removed for final)

28. Location Computer Configuration | Administrative Templates | System | Logon Setting nameDo not process the legacy run list DefaultNot configured (equivalent to Disabled) (Mis)guidanceEnabled

32. Location Security Settings | Local Policies | Security Options Setting name MSS: (NtfsDisable8dot3NameCreation) Enable the computer to stop generating 8.3 style filenames (recommended) DefaultDisabled (configured per-volume) (Mis)guidanceEnabled

38. www.microsoft.com/teched Sessions On-Demand & CommunityMicrosoft Certification & Training Resources Resources for IT ProfessionalsResources for Developers www.microsoft.com/learning http://microsoft.com/technet http://microsoft.com/msdn http://northamerica.msteched.com Connect. Share. Discuss.

40. Scan the Tag to evaluate this session now on myTechEd Mobile