Windows 组策略修改 之 初始化文件 %windir%\inf\defltbase.inf

OS 名称:          Microsoft Windows Server 2012 R2 Standard
OS 版本:          6.3.9600 暂缺 Build 9600

查看所有用户和组

C:\Users\Administrator>wmic useraccount list brief
AccountType  Caption                        Domain           FullName  Name             SID
512          WIN-QOATMA184E8\Administrator  WIN-QOATMA184E8            Administrator    S-1-5-21-3580962554-2649974931-79358928-500
512          WIN-QOATMA184E8\Guest          WIN-QOATMA184E8            Guest            S-1-5-21-3580962554-2649974931-79358928-501

C:\Users\Administrator>wmic group get Caption, InstallDate, LocalAccount, Domain, SID, Status
Caption                                              Domain           InstallDate  LocalAccount  SID                                           Status
WIN-QOATMA184E8\Access Control Assistance Operators  WIN-QOATMA184E8               TRUE          S-1-5-32-579                                  OK
WIN-QOATMA184E8\Administrators                       WIN-QOATMA184E8               TRUE          S-1-5-32-544                                  OK
WIN-QOATMA184E8\Backup Operators                     WIN-QOATMA184E8               TRUE          S-1-5-32-551                                  OK
WIN-QOATMA184E8\Certificate Service DCOM Access      WIN-QOATMA184E8               TRUE          S-1-5-32-574                                  OK
WIN-QOATMA184E8\Cryptographic Operators              WIN-QOATMA184E8               TRUE          S-1-5-32-569                                  OK
WIN-QOATMA184E8\Distributed COM Users                WIN-QOATMA184E8               TRUE          S-1-5-32-562                                  OK
WIN-QOATMA184E8\Event Log Readers                    WIN-QOATMA184E8               TRUE          S-1-5-32-573                                  OK
WIN-QOATMA184E8\Guests                               WIN-QOATMA184E8               TRUE          S-1-5-32-546                                  OK
WIN-QOATMA184E8\Hyper-V Administrators               WIN-QOATMA184E8               TRUE          S-1-5-32-578                                  OK
WIN-QOATMA184E8\IIS_IUSRS                            WIN-QOATMA184E8               TRUE          S-1-5-32-568                                  OK
WIN-QOATMA184E8\Network Configuration Operators      WIN-QOATMA184E8               TRUE          S-1-5-32-556                                  OK
WIN-QOATMA184E8\Performance Log Users                WIN-QOATMA184E8               TRUE          S-1-5-32-559                                  OK
WIN-QOATMA184E8\Performance Monitor Users            WIN-QOATMA184E8               TRUE          S-1-5-32-558                                  OK
WIN-QOATMA184E8\Power Users                          WIN-QOATMA184E8               TRUE          S-1-5-32-547                                  OK
WIN-QOATMA184E8\Print Operators                      WIN-QOATMA184E8               TRUE          S-1-5-32-550                                  OK
WIN-QOATMA184E8\RDS Endpoint Servers                 WIN-QOATMA184E8               TRUE          S-1-5-32-576                                  OK
WIN-QOATMA184E8\RDS Management Servers               WIN-QOATMA184E8               TRUE          S-1-5-32-577                                  OK
WIN-QOATMA184E8\RDS Remote Access Servers            WIN-QOATMA184E8               TRUE          S-1-5-32-575                                  OK
WIN-QOATMA184E8\Remote Desktop Users                 WIN-QOATMA184E8               TRUE          S-1-5-32-555                                  OK
WIN-QOATMA184E8\Remote Management Users              WIN-QOATMA184E8               TRUE          S-1-5-32-580                                  OK
WIN-QOATMA184E8\Replicator                           WIN-QOATMA184E8               TRUE          S-1-5-32-552                                  OK
WIN-QOATMA184E8\Users                                WIN-QOATMA184E8               TRUE          S-1-5-32-545                                  OK
WIN-QOATMA184E8\WinRMRemoteWMIUsers__                WIN-QOATMA184E8               TRUE          S-1-5-21-3580962554-2649974931-79358928-1000  OK

查看所有系统内置用户和组

C:\Users\Administrator> WHOAMI /USER /GROUPS

用户信息
----------------

用户名                        SID
============================= ===========================================
win-qoatma184e8\administrator S-1-5-21-3580962554-2649974931-79358928-500


组信息
-----------------

组名                                  类型   SID          属性
===================================== ====== ============ ==========================================
Everyone                              已知组 S-1-1-0      必需的组, 启用于默认, 启用的组
NT AUTHORITY\本地帐户和管理员组成员       已知组 S-1-5-114    必需的组, 启用于默认, 启用的组
BUILTIN\Administrators                别名   S-1-5-32-544 必需的组, 启用于默认, 启用的组, 组的所有者
BUILTIN\Users                         别名   S-1-5-32-545 必需的组, 启用于默认, 启用的组
NT AUTHORITY\REMOTE INTERACTIVE LOGON 已知组 S-1-5-14     必需的组, 启用于默认, 启用的组
NT AUTHORITY\INTERACTIVE              已知组 S-1-5-4      必需的组, 启用于默认, 启用的组
NT AUTHORITY\Authenticated Users      已知组 S-1-5-11     必需的组, 启用于默认, 启用的组
NT AUTHORITY\This Organization        已知组 S-1-5-15     必需的组, 启用于默认, 启用的组
NT AUTHORITY\本地帐户                  已知组 S-1-5-113    必需的组, 启用于默认, 启用的组
LOCAL                                 已知组 S-1-2-0      必需的组, 启用于默认, 启用的组
NT AUTHORITY\NTLM Authentication      已知组 S-1-5-64-10  必需的组, 启用于默认, 启用的组
Mandatory Label\High Mandatory Level  标签   S-1-16-12288

 

初始配置文件路径:     %windir%\inf\defltbase.inf

; Copyright (c) Microsoft Corporation.  All rights reserved.
;
; Security Configuration Template for Security Configuration Editor
;
; Template Name:        DefltSV.INF
; Template Version:     05.10.DS.0000
;
; Default Security For Windows VISTA Server.

[Profile Description]
%SCEDefltSVProfileDescription%

[version]
signature="$CHICAGO$"
revision=1
DriverVer=06/21/2006,6.3.9600.16384


[System Access]
;----------------------------------------------------------------
;Account Policies - Passw