Windows 操作系统安全配置基线
目 录
第 1 章 概述..............................................................................................................................................5
1.1 目的................................................................................................................................................5
1.2 适用范围........................................................................................................................................5
1.3 说明................................................................................................................................................5
第 2 章 帐户管理及认证授权..................................................................................................................6
2.1 帐户安全........................................................................................................................................6
2.1.1
管理缺省帐户
..........................................................................................................................6
2.1.2
按照用户分配帐户
..................................................................................................................7
2.1.3
删除或锁定与设备无关帐户
..................................................................................................8
2.2 口令要求........................................................................................................................................9
2.2.1
密码复杂度
..............................................................................................................................9
2.2.2
密码最长留存期
....................................................................................................................10
2.2.3
帐户锁定策略
........................................................................................................................12
2.3 认证授权......................................................................................................................................13
2.3.1
远程关机
................................................................................................................................13
2.3.2
本地关机
................................................................................................................................14
2.3.3
授权帐户登陆
........................................................................................................................15
2.3.4
远程访问注册表
....................................................................................................................16
2.3.5
匿名访问网络共享
................................................................................................................17
2.3.6
用户权限分配
........................................................................................................................18
2.3.7
授权帐户从网络访问
............................................................................................................19
第 3 章 日志审计....................................................................................................................................21
3.1 审核登录......................................................................................................................................21
3.2 系统日志完备性检查..................................................................................................................22
3.3 日志文件大小..............................................................................................................................23
第 4 章 服务安全....................................................................................................................................24
4.1 系统启动项列表管理..................................................................................................................24
4.2 关闭 WINDOWS 自动播放功能....................................................................................................25
4.3 配置屏幕保护密码和开启时间..................................................................................................26
4.4 限制远程登陆空闲断开时间......................................................................................................27
4.5 限制远程访问默认端口..............................................................................................................28
4.6 SNMP 服务管理...........................................................................................................................29
第 5 章 剩余信息保护............................................................................................................................30
5.1 不显示上次登录用户名..............................................................................................................30
5.2 关机前清除虚拟内存页面..........................................................................................................31
5.3 不启用用可还原的加密来存储密码..........................................................................................32
第 6 章 共享安全....................................................................................................................................33
6.1 关闭默认共享..............................................................................................................................33
第 3 页 共 41 页
