HP Brio ba200 hp brio ba200, ba400, ba600, hp kayak xu800, xm600, ProtectTools - Page 59

Customizing Security For Your Installed Base of PCs, Example 1

Page 59 highlights

4 Managing Security and Smart Cards Managing Security: Configuration Settings Windows NT 4.0 Windows 2000 Customizing Security For Your Installed Base of PCs These security options can be used to customize the level of security and accessibility provided by each PC, and the installed base as a whole. Each PC can have its own security settings as appropriate. Example 1 You have a shared or communal PC that does not have sensitive data. The PC only really needs to be started up once in the morning, using a dummy Windows NT account made for this purpose. This configuration may be appropriate: Manual logon for: Administrators On card removal: Continue … Make screen savers secure ; Allow unauthenticated shutdown ; Display smart card owner's name... ; Display last username... Example 2 You want to prevent users, as much as possible, from preparing their own smart cards for a maximum control over smart card management. This configuration may be appropriate: … Allow smart card initialization Manual logon for: Administrators Random passwords: Force … Allow unauthenticated shutdown ; Display smart card owner's name... ; Display last username... Example 3 There is a PC used by only one person who has high security clearance. Also, the PC contains highly sensitive data and requires maximum security. This configuration may be appropriate: … Allow smart card initialization 59

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80

59
4
Managing Security and Smart Cards
Managing Security: Configuration Settings
Customizing Security For Your Installed Base of PCs
These security options can be used to customize the level of security
and accessibility provided by each PC, and the installed base as a
whole. Each PC can have its own security settings as appropriate.
Example 1
You have a shared or communal PC that does not have sensitive data.
The PC only really needs to be started up once in the morning, using a
dummy Windows NT account made for this purpose. This configuration
may be appropriate:
Manual logon for: Administrators
On card removal: Continue
²³
²³
²³
²³
Make screen savers secure
Allow unauthenticated shutdown
;
³
Display smart card owner’s name...
;
³
Display last username...
Example 2
You want to prevent users, as much as possible, from preparing their
own smart cards for a maximum control over smart card management.
This configuration may be appropriate:
²³
²³
²³
²³
Allow smart card initialization
Manual logon for: Administrators
Random passwords: Force
²³
²³
²³
²³
Allow unauthenticated shutdown
Display smart card owner’s name...
Display last username...
Example 3
There is a PC used by only one person who has high security clearance.
Also, the PC contains highly sensitive data and requires maximum
security. This configuration may be appropriate:
²³
²³
²³
²³
Allow smart card initialization
Windows NT 4.0
Windows 2000