A SID is a numerical identifier that maps to the user-friendly name of the account. In other cases where the the SCAP content checks to see whether an account does or does not have a specific user right a well-known security identifier (SID) is used.
The USGCB settings require the following user rights be assigned to this account: "Denied Access To This Computer From The Network", "Denied Logon As A Batch Job", and "Denied Logon Locally." If the account is deleted then there is no reason to assign these rights to it. The SUPPORT_388945a0 account is a special account built into Windows XP that is used for the Remote Assistance feature. Baselines developed by the USGCB should be applied to Federal systems. Under the ISIMC, settings for existing baselines were modified per federal agency input, and new baselines are currently under development. More recently, the responsibility for governance of the USGCB was transferred from the TIS to the Information Security and Identity Management Committee (ISIMC). To better support configuration setting baseline guidance under the FDCC mandate, USGCB was created and USGCB configuration settings replaced the original FDCC configuration settings for the existing supported platform baselines. The twofold purpose of the TIS included providing recommended security baselines for Information Technology products widely deployed across agencies, and serving as the Change Control Board (CCB) for the configuration setting portion of the FDCC mandate. The Federal CIO Council originally created the Technology Information Subcommittee (TIS) at the direction of OMB to govern, among other federal activities, the FDCC initiative. NIST, at the request of the Federal CIO Council's Architecture and Infrastructure Committee's (AIC) Technology Infrastructure Subcommittee (TIS), evaluated these settings for Federal civilian agency use, normalized them with existing recommendations for Windows platforms, and recommend them to the TIS of what should be considered for Federal-wide adoption. These checklists were posted to according to the process detailed in NIST SP 800-70 Rev.
They field-tested these settings on typical enterprise-connected desktop and laptop computers, and submitted the configuration settings to the NIST National Checklist Program (NCP) as the DoD Consensus Security Configuration Checklist for Microsoft IE Revision 1.0, the DoD Consensus Security Configuration Checklist for Microsoft Windows 7 Revision 1.0, and the DoD Consensus Security Configuration Checklist for Red Hat Enterprise Linux 5.
The Department of Defense (DoD), with NIST assistance and IT vendor consultation, developed the Windows, IE, and Red Hat USGCB configuration settings.
0 kommentar(er)
