go.mondoo.com/cnquery@v0.0.0-20231005093811-59568235f6ea/providers/os/resources/windows/testdata/secpol.toml (about)

     1  [commands."powershell.exe -NoProfile -EncodedCommand JABQAHIAbwBnAHIAZQBzAHMAUAByAGUAZgBlAHIAZQBuAGMAZQA9ACcAUwBpAGwAZQBuAHQAbAB5AEMAbwBuAHQAaQBuAHUAZQAnADsACgBzAGUAYwBlAGQAaQB0ACAALwBlAHgAcABvAHIAdAAgAC8AYwBmAGcAIABvAHUAdAAuAGMAZgBnACAAIAB8ACAATwB1AHQALQBOAHUAbABsAAoAJAByAGEAdwAgAD0AIABHAGUAdAAtAEMAbwBuAHQAZQBuAHQAIABvAHUAdAAuAGMAZgBnAAoAUgBlAG0AbwB2AGUALQBJAHQAZQBtACAALgBcAG8AdQB0AC4AYwBmAGcAIAB8ACAATwB1AHQALQBOAHUAbABsAAoAVwByAGkAdABlAC0ATwB1AHQAcAB1AHQAIAAkAHIAYQB3AAoA"]
     2  stdout = """[Unicode]
     3  Unicode=yes
     4  [System Access]
     5  MinimumPasswordAge = 0
     6  MaximumPasswordAge = 42
     7  MinimumPasswordLength = 0
     8  PasswordComplexity = 1
     9  PasswordHistorySize = 0
    10  LockoutBadCount = 0
    11  RequireLogonToChangePassword = 0
    12  ForceLogoffWhenHourExpire = 0
    13  NewAdministratorName = \"chris\"
    14  NewGuestName = \"Guest\"
    15  ClearTextPassword = 0
    16  LSAAnonymousNameLookup = 0
    17  EnableAdminAccount = 1
    18  EnableGuestAccount = 0
    19  [Event Audit]
    20  AuditSystemEvents = 0
    21  AuditLogonEvents = 0
    22  AuditObjectAccess = 0
    23  AuditPrivilegeUse = 0
    24  AuditPolicyChange = 0
    25  AuditAccountManage = 0
    26  AuditProcessTracking = 0
    27  AuditDSAccess = 0
    28  AuditAccountLogon = 0
    29  [Registry Values]
    30  MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Setup\\RecoveryConsole\\SecurityLevel=4,0
    31  MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Setup\\RecoveryConsole\\SetCommand=4,0
    32  MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\CachedLogonsCount=1,"10"
    33  MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\ForceUnlockLogon=4,0
    34  MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\PasswordExpiryWarning=4,5
    35  MACHINE\\Software\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\ScRemoveOption=1,"0"
    36  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ConsentPromptBehaviorAdmin=4,5
    37  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ConsentPromptBehaviorUser=4,3
    38  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DisableCAD=4,0
    39  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\DontDisplayLastUserName=4,0
    40  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableInstallerDetection=4,1
    41  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableLUA=4,1
    42  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableSecureUIAPaths=4,1
    43  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableUIADesktopToggle=4,0
    44  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\EnableVirtualization=4,1
    45  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\LegalNoticeCaption=1,""
    46  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\LegalNoticeText=7,
    47  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\PromptOnSecureDesktop=4,1
    48  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ScForceOption=4,0
    49  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ShutdownWithoutLogon=4,0
    50  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\UndockWithoutLogon=4,1
    51  MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ValidateAdminCodeSignatures=4,0
    52  MACHINE\\Software\\Policies\\Microsoft\\Windows\\Safer\\CodeIdentifiers\\AuthenticodeEnabled=4,0
    53  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\AuditBaseObjects=4,0
    54  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\CrashOnAuditFail=4,0
    55  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\DisableDomainCreds=4,0
    56  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\EveryoneIncludesAnonymous=4,0
    57  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FIPSAlgorithmPolicy\\Enabled=4,0
    58  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\ForceGuest=4,0
    59  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\FullPrivilegeAuditing=3,0
    60  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\LimitBlankPasswordUse=4,1
    61  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\MSV1_0\\NTLMMinClientSec=4,536870912
    62  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\MSV1_0\\NTLMMinServerSec=4,536870912
    63  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\NoLMHash=4,1
    64  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\RestrictAnonymous=4,0
    65  MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\RestrictAnonymousSAM=4,1
    66  MACHINE\\System\\CurrentControlSet\\Control\\Print\\Providers\\LanMan Print Services\\Servers\\AddPrinterDrivers=4,1
    67  MACHINE\\System\\CurrentControlSet\\Control\\SecurePipeServers\\Winreg\\AllowedExactPaths\\Machine=7,System\\CurrentControlSet\\Control\\ProductOptions,System\\CurrentControlSet\\Control\\Server Applications,Software\\Microsoft\\Windows NT\\CurrentVersion
    68  MACHINE\\System\\CurrentControlSet\\Control\\SecurePipeServers\\Winreg\\AllowedPaths\\Machine=7,System\\CurrentControlSet\\Control\\Print\\Printers,System\\CurrentControlSet\\Services\\Eventlog,Software\\Microsoft\\OLAP Server,Software\\Microsoft\\Windows NT\\CurrentVersion\\Print,Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows,System\\CurrentControlSet\\Control\\ContentIndex,System\\CurrentControlSet\\Control\\Terminal Server,System\\CurrentControlSet\\Control\\Terminal Server\\UserConfig,System\\CurrentControlSet\\Control\\Terminal Server\\DefaultUserConfiguration,Software\\Microsoft\\Windows NT\\CurrentVersion\\Perflib,System\\CurrentControlSet\\Services\\SysmonLog
    69  MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Kernel\\ObCaseInsensitive=4,1
    70  MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\Memory Management\\ClearPageFileAtShutdown=4,0
    71  MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\ProtectionMode=4,1
    72  MACHINE\\System\\CurrentControlSet\\Control\\Session Manager\\SubSystems\\optional=7,
    73  MACHINE\\System\\CurrentControlSet\\Services\\LanManServer\\Parameters\\AutoDisconnect=4,15
    74  MACHINE\\System\\CurrentControlSet\\Services\\LanManServer\\Parameters\\EnableForcedLogOff=4,1
    75  MACHINE\\System\\CurrentControlSet\\Services\\LanManServer\\Parameters\\EnableSecuritySignature=4,0
    76  MACHINE\\System\\CurrentControlSet\\Services\\LanManServer\\Parameters\\NullSessionPipes=7,
    77  MACHINE\\System\\CurrentControlSet\\Services\\LanManServer\\Parameters\\RequireSecuritySignature=4,0
    78  MACHINE\\System\\CurrentControlSet\\Services\\LanManServer\\Parameters\\RestrictNullSessAccess=4,1
    79  MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters\\EnablePlainTextPassword=4,0
    80  MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters\\EnableSecuritySignature=4,1
    81  MACHINE\\System\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters\\RequireSecuritySignature=4,0
    82  MACHINE\\System\\CurrentControlSet\\Services\\LDAP\\LDAPClientIntegrity=4,1
    83  MACHINE\\System\\CurrentControlSet\\Services\\Netlogon\\Parameters\\DisablePasswordChange=4,0
    84  MACHINE\\System\\CurrentControlSet\\Services\\Netlogon\\Parameters\\MaximumPasswordAge=4,30
    85  MACHINE\\System\\CurrentControlSet\\Services\\Netlogon\\Parameters\\RequireSignOrSeal=4,1
    86  MACHINE\\System\\CurrentControlSet\\Services\\Netlogon\\Parameters\\RequireStrongKey=4,1
    87  MACHINE\\System\\CurrentControlSet\\Services\\Netlogon\\Parameters\\SealSecureChannel=4,1
    88  MACHINE\\System\\CurrentControlSet\\Services\\Netlogon\\Parameters\\SignSecureChannel=4,1
    89  [Privilege Rights]
    90  SeNetworkLogonRight = *S-1-1-0,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
    91  SeBackupPrivilege = *S-1-5-32-544,*S-1-5-32-551
    92  SeChangeNotifyPrivilege = *S-1-1-0,*S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
    93  SeSystemtimePrivilege = *S-1-5-19,*S-1-5-32-544
    94  SeCreatePagefilePrivilege = *S-1-5-32-544
    95  SeDebugPrivilege = *S-1-5-32-544
    96  SeRemoteShutdownPrivilege = *S-1-5-32-544
    97  SeAuditPrivilege = *S-1-5-19,*S-1-5-20
    98  SeIncreaseQuotaPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544
    99  SeIncreaseBasePriorityPrivilege = *S-1-5-32-544,*S-1-5-90-0
   100  SeLoadDriverPrivilege = *S-1-5-32-544
   101  SeBatchLogonRight = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-559
   102  SeServiceLogonRight = *S-1-5-80-0
   103  SeInteractiveLogonRight = *S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
   104  SeSecurityPrivilege = *S-1-5-32-544
   105  SeSystemEnvironmentPrivilege = *S-1-5-32-544
   106  SeProfileSingleProcessPrivilege = *S-1-5-32-544
   107  SeSystemProfilePrivilege = *S-1-5-32-544,*S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420
   108  SeAssignPrimaryTokenPrivilege = *S-1-5-19,*S-1-5-20
   109  SeRestorePrivilege = *S-1-5-32-544,*S-1-5-32-551
   110  SeShutdownPrivilege = *S-1-5-32-544,*S-1-5-32-551
   111  SeTakeOwnershipPrivilege = *S-1-5-32-544
   112  SeUndockPrivilege = *S-1-5-32-544
   113  SeManageVolumePrivilege = *S-1-5-32-544
   114  SeRemoteInteractiveLogonRight = *S-1-5-32-544,*S-1-5-32-555
   115  SeImpersonatePrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-6
   116  SeCreateGlobalPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-6
   117  SeIncreaseWorkingSetPrivilege = *S-1-5-32-545
   118  SeTimeZonePrivilege = *S-1-5-19,*S-1-5-32-544
   119  SeCreateSymbolicLinkPrivilege = *S-1-5-32-544
   120  SeDelegateSessionUserImpersonatePrivilege = *S-1-5-32-544
   121  [Version]
   122  signature=\"$CHICAGO$\"
   123  Revision=1
   124  """