How To Translate Security Policy Into Technical Controls

By Author: unknownmem
Total Articles: 128
Comment this article

There are hundreds of administrative templates. How do you decide which ones to use 70-291 Exam(http://www.mcsa-70-291.com)
how to set them? You must use your knowledge of your organization's security policy and your knowledge of the impact that the ability to use the operating system feature has. You can gain much information from reading the Explain tabs of the administrative template settings, but you must also use your ability to analyze the threat that might come from using the feature. To do the latter, you must use your knowledge of what the operating system feature or utility does. The rest of this lesson provides a sample analysis of how to translate a security policy into the technical controls and guidelines for restricting user access to operating system features.
In this scenario, a security policy will be translated into the use of administrative tem-plates and membership in Windows Groups.
To apply technical controls that will assist the fulfillment of this policy, the following steps are taken:
The user right Access This Computer From The Network is assigned only to administrators and ...
... domain controller computers.
The following services are disabled in the free exam question papers(http://www.examshots.com)
designed for restricting user access to operating systems features:

The Remote Desktop Users group is added to the Restricted Groups section of GPOs designed for OUs. No members are added to the group. When Group Policy is refreshed, any members who have been added to the group will be removed.
Settings in administrative templates that might provide users with remote access to client computers are modified in GPOs designed for user OUs. A listing of these settings is provided in the "Administrative Template Settings that Manage Remote Access" section.
If a user OU does not already have a GPO used for the purpose of managing user access to operating system features, a new GPO is created and linked to the OU.Watch double negatives in administrative templates. Enabling a setting that begins with the word "Disable" disables the feature. Disabling the same feature actually enables it. Enabling a setting that begins with the words "Do not allow" disables a feature. Disabling the same setting actually enables it.
If you set the software restriction policy security level to Disallowed, no software other than crucial operating system features can run
MCSE exams(http://www.certtopper.com)
unless you create a software restriction rule that allows the software to run.