5 Configuration Instructions for UseCLARUS® 5005.11 System Administration94 / 192 2660021171806 Rev. A 2019-01Policy SettingShutdown: Clear virtual memory pagefile DisabledSign-in last interactive user automatically after a system-initiated restart DisabledSpecify the maximum log file size (KB) (Application Log)Maximum Log Size (KB)Enabled32768Specify the maximum log file size (KB) (Security Log)Maximum Log Size (KB)Enabled196608Specify the maximum log file size (KB) (System Log)Maximum Log Size (KB)Enabled32768Store passwords using reversible encryption DisabledSystem cryptography: Use FIPS compliant algorithms for encryption, hashing, andsigningDisabledSystem objects: Require case insensitivity for non-Windows subsystems EnabledSystem objects: Strengthen default permissions of internal system objects (e.g.Symbolic Links)EnabledSystem settings: Use Certificate Rules on Windows Executables for SoftwareRestriction PoliciesDisabledTake ownership of files or other objects AdministratorsTurn off access to the Store EnabledTurn off app notifications on the lock screen EnabledTurn off Automatic Download and Install of updates EnabledTurn off Autoplay Turn offAutoplay onEnabledAll drivesTurn off Data Execution Prevention for Explorer DisabledTurn off downloading of print drivers over HTTP DisabledTurn off heap termination on corruption DisabledTurn off Internet download for Web publishing and online ordering wizards EnabledTurn off Microsoft consumer experiences EnabledTurn off Password Manager DisabledTurn off printing over HTTP DisabledTurn off the offer to update to the latest version of Windows EnabledTurn off the SmartScreen Filter EnabledTurn off toast notifications on the lock screen EnabledTurn off Windows Update device driver searching Enabled
