Windows XP Security Guide Tools and Templates
=================================================================================
Windows XP Security Guide
(c) Microsoft 2005
Version 2.1, released: October 20, 2005
=================================================================================
Windows XP Security Guide Download
TechNet: http://go.microsoft.com/fwlink/?LinkId=14839
Download: http://go.microsoft.com/fwlink/?LinkId=14840
The Windows XP Security Guide provides several levels of security guidance for
customers who are interested in hardening deployments of Windows XP for desktop
and laptop client computers in their environments.
This guide includes settings for Windows XP client computers that are deployed in
a Microsoft Windows 2000 or Windows Server 2003 Active Directory domain. Guidance
is also included for an environment that requires an extremely high level of
security in which application compatibility or usability may be constrained. This
guide also discusses procedures for implementing Windows XP security settings on
stand-alone client computers.
=================================================================================
Folder contents of the Windows_XP_Security_Guide.zip:
<Windows XP Security Guide>
Windows XP Security Guide.doc
Chapter 1: Introduction to the Windows XP Security Guide
Includes an overview of the guide, descriptions of the
intended audience, the problems that are discussed in the guide,
and the overall intent of the guide.
Chapter 2: Configuring the Active Directory Domain Infrastructure
Discusses the preliminary steps that must be performed in your
domain before you apply Group Policy to your Windows XP client
computers. Group Policy settings are stored in Group Policy objects
(GPOs) on domain controllers. GPOs are linked to sites, domains,
and OUs within the Active Directory structure. Because Group Policy
is so closely integrated with Active Directory, it is important to
have a basic understanding of your Active Directory structure and
security implications before you implement Group Policy.
Chapter 3: Security Settings for Windows XP Clients
Describes the security settings for Windows XP client computers
that may be set through Group Policy in a Windows 2000 or
Windows Server 2003 Active Directory domain. The settings that you
configure should be based on your organization’s security goals.
Chapter 4: Administrative Templates for Windows XP
Discusses settings that can be added to Windows XP by using
Administrative Templates. There are many Administrative Templates
that can be used with Windows XP, and they contain hundreds of settings.
Chapter 5: Securing Stand-Alone Windows XP Clients
Discusses the configuration of stand-alone Windows XP client
computers. Microsoft recommends that Windows XP be deployed in an
Active Directory domain infrastructure, but recognizes that it is
not always possible to do so. This chapter provides guidance about
how to apply the recommended configurations to Windows XP with SP2
client computers that are not members of a Windows 2000 or
Windows Server 2003 domain.
Chapter 6: Software Restriction Policy for Windows XP Clients
Provides a basic overview of software restriction policy, which
provides administrators with a policy-driven mechanism to identify and
limit the software that can be run in their domain. Administrators can
use a software restriction policy to prevent unwanted programs from running
and prevent viruses, Trojan horses, or other malicious code from spreading.
Chapter 7: Conclusion
Reviews the important points of the guide in a brief overview of
everything that is discussed in the previous chapters.
Appendix A: Key Settings to Consider
This appendix discusses the settings that will have the biggest impact
on the security of computers that run Windows XP with SP2.
Appendix B: Testing the Windows XP Security Guide
This appendix explains how the Windows XP Security Guide was tested
in a lab environment to ensure that the guidance works as expected.
ReleaseNotes.txt
Windows XP Security Guide Release Notes
Readme.txt
This file (the file that you are reading)
Windows XP Security Guide Tools and Templates.msi
When this file is executed, the following folder structure will
be created and populated with the following files:
<Windows XP Security Guide Tools and Templates\SCE Update>
Restore_SCE_to_Default.vbs
Rollback_SCE_for_MSS_Regkeys.vbs
sceregvl_W2K3_SP1.inf.txt
sceregvl_XPSP2.inf.txt
Strings-sceregvl.txt
Updated_SCE_with_MSS_Regkeys.vbs
Values-sceregvl.txt
<Windows XP Security Guide Tools and Templates\Security Templates>
EC-Desktop.inf
EC-Domain.inf
EC-Laptop.inf
Optional-File-Permissions.inf
SSLF-Desktop.inf
SSLF-Domain.inf
SSLF-Laptop.inf
Windows XP Security Guide Settings.xls
Windows XP Service Pack 2 default security.inf
<Windows XP Security Guide Tools and Templates\Stand Alone Clients>
EC-Desktop.inf
EC-Laptop.inf
Legacy-EC-Account.inf
Legacy-EC-Desktop.cmd.txt
Legacy-EC-Desktop.inf
Legacy-EC-Laptop.cmd.txt
Legacy-EC-Laptop.inf
Legacy-SSLF-Account.inf
Legacy-SSLF-Desktop.cmd.txt
Legacy-SSLF-Desktop.inf
Legacy-SSLF-Laptop.cmd.txt
Legacy-SSLF-Laptop.inf
SSLF-Desktop.inf
SSLF-Laptop.inf
Standalone-EC-Account.inf
Standalone-EC-Desktop.cmd.txt
Standalone-EC-Laptop.cmd.txt
Standalone-SSLF-Account.inf
Standalone-SSLF-Desktop.cmd.txt
Standalone-SSLF-Laptop.cmd.txt
XP Default Security.sdb
<Windows XP Security Guide Tools and Templates\Test Tools>
AdminChangePassWord.vbs
AdminFileAccess.vbs
AdminLogon.vbs
AdminPrint.vbs
AdminPrintQueues.vbs
config.ini
DirectoryQuery.vbs
Imp_Read.txt
MSSLog.txt
PrintTest.txt
UserFileAccess.vbs
UserLogon.vbs
UserPrint.vbs
UserPrintQueues.vbs
Win2kReleaseIPRenewIP.vbs
Windows XP Security Guide Test Cases.xls
=================================================================================
© 2005 Microsoft Corporation. This work is licensed under the Creative CommonsAttribution-NonCommercial License. To view a copy of this license, visit
http://creativecommons.org/licenses/by-nc/2.5/ or send a letter to Creative
Commons, 543 Howard Street, 5th Floor, San Francisco, California, 94105, USA.
