.png)
Windows Server Solutions Best Practices Analyzer: Rules
The following table contains the rules in this release.
| Rule description | Applicability |
|---|---|
|
You are now running Windows Server Solutions Best Practices Analyzer on a computer that is running <<SERVERSKU>> |
Windows Small Business Server 2011 Windows Storage Server 2008 R2 Essentials, Windows Multipoint Server 2011 |
|
The internal network adapter must be assigned only one IP address |
Windows SBS 2011 |
|
IP filtering must be disabled |
Windows SBS 2011 |
|
The server must be able to ping the IP address of the default gateway |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The server can ping the IP address of the default gateway |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Internet Protocol Version 6 (TCP/IPv6) should be enabled |
Windows SBS 2011 STD |
|
The kernel mode authentication should be disabled |
Windows SBS 2011 STD |
|
Hyper-V role should not be added to the Windows SBS 2011 server |
Windows SBS 2011 |
|
The MSDTC service should be set to start automatically by default |
Windows SBS 2011 |
|
The Netlogon service should be configured to start automatically by default |
Windows SBS 2011 |
|
The DNS Client service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The DNS Server service should be configured to start automatically by default |
Windows SBS 2011 |
|
The DHCP Client service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The IIS Admin service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The World Wide Web Publishing service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Remote Registry service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows SBS Manager service should be configured to start automatically by default |
Windows SBS 2011 STD |
|
The Remote Desktop Gateway service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows Time service should be configured to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows Update service should be set to start automatically by default |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The MSDTC service should be started |
Windows SBS 2011 |
|
The Netlogon service should be started |
Windows SBS 2011 |
|
The DNS Client service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The DNS Server service should be started |
Windows SBS 2011 |
|
The Windows Update service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The IIS Admin service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The World Wide Web Publishing service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Remote Registry service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows SBS Manager Service should be started |
Windows SBS 2011 STD |
|
The Remote Desktop Gateway service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows Time service should be started |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The MSDTC service should be the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011 |
|
The Netlogon service should use the Local System account as its logon account |
Windows SBS 2011 |
|
The DNS Client service should use the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The DNS Server service should use the Local System account as its logon account |
Windows SBS 2011 |
|
The Windows Update service should use the Local System account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The DHCP Client service should use the NT AUTHORITY\LocalService account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The IIS Admin service service should use the Local System account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The World Wide Web Publishing service should use the Local System account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows SBS Manager service should use the Local System account as its logon account |
Windows SBS 2011 STD |
|
The Remote Desktop Gateway service should use the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
The Windows Time service should use the NT AUTHORITY\Network Service account as its logon account |
Windows SBS 2011, Windows Storage 2008 R2 Essentials |
|
You are now running Windows Server Solutions Best Practices Analyzer on a computer that is running <<SERVERSKU>> |
Windows Multipoint 2011 |
|
The Windows MultiPoint Server Host Service must be configured to start automatically by default |
Windows Multipoint 2011 |
|
The Windows MultiPoint Server Host Service must use the Local System account as its logon account |
Windows Multipoint 2011 |
|
The SRCShell user account must exist for Windows MultiPoint Server to properly function |
Windows Multipoint 2011 |
|
The Windows MultiPoint Server Host Service must be started |
Windows Multipoint 2011 |
|
The Remote Desktop Services service must be started |
Windows Multipoint 2011 |
