Raymond Chen 8fe5a4a6f1 Clarify scope of "Create global objects" ...

Applies only to file mapping and symbolic link objects. Also, apples to Windows in general, not just Terminal Services.

2024-02-09 14:16:06 -08:00

..

images

windows security cleanrepo

2023-02-13 09:57:33 -05:00

access-credential-manager-as-a-trusted-caller.md

In all content, remove

2024-01-12 19:42:18 +00:00

access-this-computer-from-the-network.md

In all content, remove

2024-01-12 19:42:18 +00:00

account-lockout-duration.md

In all content, remove

2024-01-12 19:42:18 +00:00

account-lockout-policy.md

In all content, remove

2024-01-12 19:42:18 +00:00

account-lockout-threshold.md

In all content, remove

2024-01-12 19:42:18 +00:00

account-policies.md

In all content, remove

2024-01-12 19:42:18 +00:00

accounts-administrator-account-status.md

In all content, remove

2024-01-12 19:42:18 +00:00

accounts-block-microsoft-accounts.md

In all content, remove

2024-01-12 19:42:18 +00:00

accounts-guest-account-status.md

In all content, remove

2024-01-12 19:42:18 +00:00

accounts-limit-local-account-use-of-blank-passwords-to-console-logon-only.md

In all content, remove

2024-01-12 19:42:18 +00:00

accounts-rename-administrator-account.md

In all content, remove

2024-01-12 19:42:18 +00:00

accounts-rename-guest-account.md

In all content, remove

2024-01-12 19:42:18 +00:00

act-as-part-of-the-operating-system.md

In all content, remove

2024-01-12 19:42:18 +00:00

add-workstations-to-domain.md

In all content, remove

2024-01-12 19:42:18 +00:00

adjust-memory-quotas-for-a-process.md

In all content, remove

2024-01-12 19:42:18 +00:00

administer-security-policy-settings.md

In all content, remove

2024-01-12 19:42:18 +00:00

allow-log-on-locally.md

In all content, remove

2024-01-12 19:42:18 +00:00

allow-log-on-through-remote-desktop-services.md

In all content, remove

2024-01-12 19:42:18 +00:00

audit-audit-the-access-of-global-system-objects.md

In all content, remove

2024-01-12 19:42:18 +00:00

audit-audit-the-use-of-backup-and-restore-privilege.md

In all content, remove

2024-01-12 19:42:18 +00:00

audit-force-audit-policy-subcategory-settings-to-override.md

In all content, remove

2024-01-12 19:42:18 +00:00

audit-policy.md

In all content, remove

2024-01-12 19:42:18 +00:00

audit-shut-down-system-immediately-if-unable-to-log-security-audits.md

In all content, remove

2024-01-12 19:42:18 +00:00

back-up-files-and-directories.md

In all content, remove

2024-01-12 19:42:18 +00:00

bypass-traverse-checking.md

In all content, remove

2024-01-12 19:42:18 +00:00

change-the-system-time.md

In all content, remove

2024-01-12 19:42:18 +00:00

change-the-time-zone.md

In all content, remove

2024-01-12 19:42:18 +00:00

create-a-pagefile.md

In all content, remove

2024-01-12 19:42:18 +00:00

create-a-token-object.md

In all content, remove

2024-01-12 19:42:18 +00:00

create-global-objects.md

Clarify scope of "Create global objects"

2024-02-09 14:16:06 -08:00

create-permanent-shared-objects.md

In all content, remove

2024-01-12 19:42:18 +00:00

create-symbolic-links.md

In all content, remove

2024-01-12 19:42:18 +00:00

dcom-machine-access-restrictions-in-security-descriptor-definition-language-sddl-syntax.md

In all content, remove

2024-01-12 19:42:18 +00:00

dcom-machine-launch-restrictions-in-security-descriptor-definition-language-sddl-syntax.md

In all content, remove

2024-01-12 19:42:18 +00:00

debug-programs.md

In all content, remove

2024-01-12 19:42:18 +00:00

deny-access-to-this-computer-from-the-network.md

In all content, remove

2024-01-12 19:42:18 +00:00

deny-log-on-as-a-batch-job.md

In all content, remove

2024-01-12 19:42:18 +00:00

deny-log-on-as-a-service.md

In all content, remove

2024-01-12 19:42:18 +00:00

deny-log-on-locally.md

In all content, remove

2024-01-12 19:42:18 +00:00

deny-log-on-through-remote-desktop-services.md

In all content, remove

2024-01-12 19:42:18 +00:00

devices-allow-undock-without-having-to-log-on.md

In all content, remove

2024-01-12 19:42:18 +00:00

devices-allowed-to-format-and-eject-removable-media.md

In all content, remove

2024-01-12 19:42:18 +00:00

devices-prevent-users-from-installing-printer-drivers.md

In all content, remove

2024-01-12 19:42:18 +00:00

devices-restrict-cd-rom-access-to-locally-logged-on-user-only.md

In all content, remove

2024-01-12 19:42:18 +00:00

devices-restrict-floppy-access-to-locally-logged-on-user-only.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-controller-allow-server-operators-to-schedule-tasks.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-controller-ldap-server-channel-binding-token-requirements.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-controller-ldap-server-signing-requirements.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-controller-refuse-machine-account-password-changes.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-member-digitally-encrypt-or-sign-secure-channel-data-always.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-member-digitally-encrypt-secure-channel-data-when-possible.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-member-digitally-sign-secure-channel-data-when-possible.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-member-disable-machine-account-password-changes.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-member-maximum-machine-account-password-age.md

In all content, remove

2024-01-12 19:42:18 +00:00

domain-member-require-strong-windows-2000-or-later-session-key.md

In all content, remove

2024-01-12 19:42:18 +00:00

enable-computer-and-user-accounts-to-be-trusted-for-delegation.md

In all content, remove

2024-01-12 19:42:18 +00:00

enforce-password-history.md

In all content, remove

2024-01-12 19:42:18 +00:00

enforce-user-logon-restrictions.md

In all content, remove

2024-01-12 19:42:18 +00:00

force-shutdown-from-a-remote-system.md

In all content, remove

2024-01-12 19:42:18 +00:00

generate-security-audits.md

In all content, remove

2024-01-12 19:42:18 +00:00

how-to-configure-security-policy-settings.md

Update ms.topic to reference

2023-11-27 16:26:07 -05:00

impersonate-a-client-after-authentication.md

In all content, remove

2024-01-12 19:42:18 +00:00

increase-a-process-working-set.md

In all content, remove

2024-01-12 19:42:18 +00:00

increase-scheduling-priority.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-display-user-information-when-the-session-is-locked.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-do-not-display-last-user-name.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-do-not-require-ctrl-alt-del.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-dont-display-username-at-sign-in.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-machine-account-lockout-threshold.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-machine-inactivity-limit.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-message-text-for-users-attempting-to-log-on.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-message-title-for-users-attempting-to-log-on.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-number-of-previous-logons-to-cache-in-case-domain-controller-is-not-available.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-prompt-user-to-change-password-before-expiration.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-require-domain-controller-authentication-to-unlock-workstation.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-require-smart-card.md

In all content, remove

2024-01-12 19:42:18 +00:00

interactive-logon-smart-card-removal-behavior.md

In all content, remove

2024-01-12 19:42:18 +00:00

kerberos-policy.md

In all content, remove

2024-01-12 19:42:18 +00:00

load-and-unload-device-drivers.md

In all content, remove

2024-01-12 19:42:18 +00:00

lock-pages-in-memory.md

In all content, remove

2024-01-12 19:42:18 +00:00

log-on-as-a-batch-job.md

In all content, remove

2024-01-12 19:42:18 +00:00

log-on-as-a-service.md

In all content, remove

2024-01-12 19:42:18 +00:00

manage-auditing-and-security-log.md

In all content, remove

2024-01-12 19:42:18 +00:00

maximum-lifetime-for-service-ticket.md

In all content, remove

2024-01-12 19:42:18 +00:00

maximum-lifetime-for-user-ticket-renewal.md

In all content, remove

2024-01-12 19:42:18 +00:00

maximum-lifetime-for-user-ticket.md

In all content, remove

2024-01-12 19:42:18 +00:00

maximum-password-age.md

In all content, remove

2024-01-12 19:42:18 +00:00

maximum-tolerance-for-computer-clock-synchronization.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-client-digitally-sign-communications-always.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-client-send-unencrypted-password-to-third-party-smb-servers.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-server-amount-of-idle-time-required-before-suspending-session.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-server-attempt-s4u2self-to-obtain-claim-information.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-server-digitally-sign-communications-always.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-server-disconnect-clients-when-logon-hours-expire.md

In all content, remove

2024-01-12 19:42:18 +00:00

microsoft-network-server-server-spn-target-name-validation-level.md

In all content, remove

2024-01-12 19:42:18 +00:00

minimum-password-age.md

In all content, remove

2024-01-12 19:42:18 +00:00

minimum-password-length.md

In all content, remove

2024-01-12 19:42:18 +00:00

modify-an-object-label.md

In all content, remove

2024-01-12 19:42:18 +00:00

modify-firmware-environment-values.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-allow-anonymous-sidname-translation.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-do-not-allow-anonymous-enumeration-of-sam-accounts-and-shares.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-do-not-allow-anonymous-enumeration-of-sam-accounts.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-do-not-allow-storage-of-passwords-and-credentials-for-network-authentication.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-let-everyone-permissions-apply-to-anonymous-users.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-named-pipes-that-can-be-accessed-anonymously.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-remotely-accessible-registry-paths-and-subpaths.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-remotely-accessible-registry-paths.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-restrict-anonymous-access-to-named-pipes-and-shares.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-restrict-clients-allowed-to-make-remote-sam-calls.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-shares-that-can-be-accessed-anonymously.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-access-sharing-and-security-model-for-local-accounts.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-list-manager-policies.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-allow-local-system-to-use-computer-identity-for-ntlm.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-allow-localsystem-null-session-fallback.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-allow-pku2u-authentication-requests-to-this-computer-to-use-online-identities.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-configure-encryption-types-allowed-for-kerberos.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-do-not-store-lan-manager-hash-value-on-next-password-change.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-force-logoff-when-logon-hours-expire.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-lan-manager-authentication-level.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-ldap-client-signing-requirements.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-clients.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-minimum-session-security-for-ntlm-ssp-based-including-secure-rpc-servers.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-add-remote-server-exceptions-for-ntlm-authentication.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-add-server-exceptions-in-this-domain.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-audit-incoming-ntlm-traffic.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-audit-ntlm-authentication-in-this-domain.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-incoming-ntlm-traffic.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-ntlm-authentication-in-this-domain.md

In all content, remove

2024-01-12 19:42:18 +00:00

network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers.md

In all content, remove

2024-01-12 19:42:18 +00:00

password-must-meet-complexity-requirements.md

Update ms.topic to reference

2023-11-27 16:26:07 -05:00

password-policy.md

In all content, remove

2024-01-12 19:42:18 +00:00

perform-volume-maintenance-tasks.md

In all content, remove

2024-01-12 19:42:18 +00:00

profile-single-process.md

In all content, remove

2024-01-12 19:42:18 +00:00

profile-system-performance.md

In all content, remove

2024-01-12 19:42:18 +00:00

recovery-console-allow-automatic-administrative-logon.md

In all content, remove

2024-01-12 19:42:18 +00:00

recovery-console-allow-floppy-copy-and-access-to-all-drives-and-folders.md

In all content, remove

2024-01-12 19:42:18 +00:00

remove-computer-from-docking-station.md

In all content, remove

2024-01-12 19:42:18 +00:00

replace-a-process-level-token.md

In all content, remove

2024-01-12 19:42:18 +00:00

reset-account-lockout-counter-after.md

In all content, remove

2024-01-12 19:42:18 +00:00

restore-files-and-directories.md

In all content, remove

2024-01-12 19:42:18 +00:00

secpol-advanced-security-audit-policy-settings.md

In all content, remove

2024-01-12 19:42:18 +00:00

security-options.md

In all content, remove

2024-01-12 19:42:18 +00:00

security-policy-settings-reference.md

In all content, remove

2024-01-12 19:42:18 +00:00

security-policy-settings.md

In all content, remove

2024-01-12 19:42:18 +00:00

shut-down-the-system.md

In all content, remove

2024-01-12 19:42:18 +00:00

shutdown-allow-system-to-be-shut-down-without-having-to-log-on.md

In all content, remove

2024-01-12 19:42:18 +00:00

shutdown-clear-virtual-memory-pagefile.md

In all content, remove

2024-01-12 19:42:18 +00:00

store-passwords-using-reversible-encryption.md

In all content, remove

2024-01-12 19:42:18 +00:00

synchronize-directory-service-data.md

In all content, remove

2024-01-12 19:42:18 +00:00

system-cryptography-force-strong-key-protection-for-user-keys-stored-on-the-computer.md

In all content, remove

2024-01-12 19:42:18 +00:00

system-cryptography-use-fips-compliant-algorithms-for-encryption-hashing-and-signing.md

In all content, remove

2024-01-12 19:42:18 +00:00

system-objects-require-case-insensitivity-for-non-windows-subsystems.md

In all content, remove

2024-01-12 19:42:18 +00:00

system-objects-strengthen-default-permissions-of-internal-system-objects.md

In all content, remove

2024-01-12 19:42:18 +00:00

system-settings-optional-subsystems.md

In all content, remove

2024-01-12 19:42:18 +00:00

system-settings-use-certificate-rules-on-windows-executables-for-software-restriction-policies.md

In all content, remove

2024-01-12 19:42:18 +00:00

take-ownership-of-files-or-other-objects.md

In all content, remove

2024-01-12 19:42:18 +00:00

TOC.yml

Add LDAP server channel binding token requirements

2023-04-28 12:03:58 -04:00

user-account-control-admin-approval-mode-for-the-built-in-administrator-account.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-allow-uiaccess-applications-to-prompt-for-elevation-without-using-the-secure-desktop.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-behavior-of-the-elevation-prompt-for-administrators-in-admin-approval-mode.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-behavior-of-the-elevation-prompt-for-standard-users.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-detect-application-installations-and-prompt-for-elevation.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-only-elevate-executables-that-are-signed-and-validated.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-only-elevate-uiaccess-applications-that-are-installed-in-secure-locations.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-run-all-administrators-in-admin-approval-mode.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-switch-to-the-secure-desktop-when-prompting-for-elevation.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-account-control-virtualize-file-and-registry-write-failures-to-per-user-locations.md

In all content, remove

2024-01-12 19:42:18 +00:00

user-rights-assignment.md

In all content, remove

2024-01-12 19:42:18 +00:00