Windows Server Solutions Best Practices Analyzer: Rules
The following table contains the rules in this release.
| Rule description | Applicability |
|---|---|
You are now running Windows Server Solutions Best Practices Analyzer on a computer that is running <<SERVERSKU>> |
Windows Small Business Server 2011 Windows Storage Server 2008 R2 Essentials, Windows Multipoint Server 2011 |
The internal network adapter must be assigned only one IP address |
Windows SBS 2011 |
IP filtering must be disabled |
Windows SBS 2011 |
The server must be able to ping the IP address of the default gateway |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The server can ping the IP address of the default gateway |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Internet Protocol Version 6 (TCP/IPv6) should be enabled |
Windows SBS 2011 STD |
The kernel mode authentication should be disabled |
Windows SBS 2011 STD |
Hyper-V role should not be added to the Windows SBS 2011 server |
Windows SBS 2011 |
The MSDTC service should be set to start automatically by default |
Windows SBS 2011 |
The Netlogon service should be configured to start automatically by default |
Windows SBS 2011 |
The DNS Client service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The DNS Server service should be configured to start automatically by default |
Windows SBS 2011 |
The DHCP Client service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The IIS Admin service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The World Wide Web Publishing service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Remote Registry service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows SBS Manager service should be configured to start automatically by default |
Windows SBS 2011 STD |
The Remote Desktop Gateway service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows Time service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows Update service should be set to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The MSDTC service should be started |
Windows SBS 2011 |
The Netlogon service should be started |
Windows SBS 2011 |
The DNS Client service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The DNS Server service should be started |
Windows SBS 2011 |
The Windows Update service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The IIS Admin service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The World Wide Web Publishing service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Remote Registry service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows SBS Manager Service should be started |
Windows SBS 2011 STD |
The Remote Desktop Gateway service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows Time service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The MSDTC service should be the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011 |
The Netlogon service should use the Local System account as its logon account |
Windows SBS 2011 |
The DNS Client service should use the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The DNS Server service should use the Local System account as its logon account |
Windows SBS 2011 |
The Windows Update service should use the Local System account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The DHCP Client service should use the NT AUTHORITY\LocalService account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The IIS Admin service service should use the Local System account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The World Wide Web Publishing service should use the Local System account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows SBS Manager service should use the Local System account as its logon account |
Windows SBS 2011 STD |
The Remote Desktop Gateway service should use the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
The Windows Time service should use the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
You are now running Windows Server Solutions Best Practices Analyzer on a computer that is running <<SERVERSKU>> |
Windows Multipoint 2011 |
The Windows MultiPoint Server Host Service must be configured to start automatically by default |
Windows Multipoint 2011 |
The Windows MultiPoint Server Host Service must use the Local System account as its logon account |
Windows Multipoint 2011 |
The SRCShell user account must exist for Windows MultiPoint Server to properly function |
Windows Multipoint 2011 |
The Windows MultiPoint Server Host Service must be started |
Windows Multipoint 2011 |
The Remote Desktop Services service must be started |
Windows Multipoint 2011 |