All DC Computer Interactive 4 logons Not Not applicable since the role is a Domain Controller. Configuration\Windows logon: Defined Settings\Security Number of previous Policies\Security Options logons to cache (in case domain controller is not available) All DC Computer Log on as a Administrators Not Previous guidance prevents some least-privilege scenarios. Configuration\Windows batch job Defined Settings\Security Settings\Local Policies\User Rights Assignment Removed Internet Explorer Recommendations This section lists settings that we believe should be removed from the Internet Explorer recommendations. In many cases, they provide little or no security value. In other cases, the settings are no longer applicable. Baseline Policy Path Policy Name Old New Value Rationale All User Disable Save this program to Enabled Not No security value IE Configuration\Administrative disk option Configured Templates\Windows Components\Internet Explorer\Browser All Computer Disable the Advanced page Enabled Not No security value IE Configuration\Administrative Configured Templates\Windows Components\Internet Explorer\Internet Control Panel
All DC Computer Configuration\Windows Settings\Security Policies\Security Options Interactive logon: Number of previous logons to cache (in case domain controller is not available) 4 logons Not Defined Not applicable since the role is a Domain Controller. All DC Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment Log on as a batch job Administrators Not Defined Previous guidance prevents some least-privilege scenarios. Removed Internet Explorer Recommendations This section lists settings that we believe should be removed from the Internet Explorer recommendations. In many cases, they provide little or no security value. In other cases, the settings are no longer applicable. Baseline Policy Path Policy Name Old New Value Rationale All IE User Configuration\Administrative Templates\Windows Components\Internet Explorer\Browser Disable Save this program to disk option Enabled Not Configured No security value All IE Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel Disable the Advanced page Enabled Not Configured No security value