Problems after applying Security Policy

[sohtnax]

I recently applied the

http://www-w2k3-dmz.inf

security policy to a Windows 2003 IIS server. Since doing so, I am unable to map a drive ot any other resource or brwose the network.

I've copied the INF config below. Anyone know how to resolve this without removing the entire policy?



; Security Configuration Template for Security Configuration Editor
;
; Template Name:

http://WWW-W2K3-DMZ.inf

; Template Version: 1.00005
;
; Release History
; 00001 - 05/03/2003 Initial Draft - Jay Ward - (jaywar@cisco.com)
; 00002 - 10/13/2003 Added Registry Entries to harden the TCP/IP Stack
; 00003 - 10/14/2003 Added Registry Entry to disable SSL v2.0 requests.
; 00004 - 10/15/2003 Added registry entries for:
; - suppressing Dr. Watson crash dumps \drwatson\createcrashdump=4,1
; - disable automatic execution of the system debugger \aedebug\auto=4,1
; - disable automatic logon \winlogon\autoadminlogon=4,0
; - disable CD autorun \cdrom\autorun=4,1
; - protect against computer browser spoofing attacks \parameters\refusereset=4,1
; - hide computer from browser lists \parameters\hidden=4,1
; - disable webdav \parameters\disablewebdav=4,1
; - disable calling CLI programs from server side includes \parameters\ssienablecmddirective=4,0
; 00005 - 02/03/2004 Added ACLs for File System and Registry enhancements.

[Profile Description]
Suggested security settings for a W2K3 DMZ Host server.

[Unicode]
Unicode=yes

[Version]
signature="$CHICAGO$"
Revision=1

[System Access]
MinimumPasswordAge = 1
MaximumPasswordAge = 90
MinimumPasswordLength = 12
PasswordComplexity = 1
PasswordHistorySize = 24
LockoutBadCount = 3
ResetLockoutCount = 15
LockoutDuration = 15
ForceLogoffWhenHourExpire = 1
NewGuestName = "disabled_guest"
ClearTextPassword = 0
LSAAnonymousNameLookup = 0
EnableAdminAccount = 1
EnableGuestAccount = 0

[System Log]
MaximumLogSize = 4194240
AuditLogRetentionPeriod = 0
RestrictGuestAccess = 1

[Security Log]
MaximumLogSize = 4194240
AuditLogRetentionPeriod = 0
RestrictGuestAccess = 1

[Application Log]
MaximumLogSize = 4194240
AuditLogRetentionPeriod = 0
RestrictGuestAccess = 1

[Event Audit]
AuditSystemEvents = 3
AuditLogonEvents = 3
AuditObjectAccess = 2
AuditPrivilegeUse = 2
AuditPolicyChange = 3
AuditAccountManage = 3
AuditProcessTracking = 0
AuditDSAccess = 0
AuditAccountLogon = 3

[Registry Values]
machine\system\software\microsoft\windows nt\currentversion\winlogon\screensavergraceperiod=4,0
machine\system\currentcontrolset\services\w3svc\parameters\ssienablecmddirective=4,0
machine\system\currentcontrolset\services\w3svc\parameters\disablewebdav=4,1
machine\system\currentcontrolset\services\tcpip\parameters\tcpmaxportsexhausted=4,5
machine\system\currentcontrolset\services\tcpip\parameters\tcpmaxdataretransmissions=4,3
machine\system\currentcontrolset\services\tcpip\parameters\tcpmaxconnectresponseretransmissions=4,2
machine\system\currentcontrolset\services\tcpip\parameters\tcpmaxhalfopen=4,500
machine\system\currentcontrolset\services\tcpip\parameters\tcpmaxhalfopenretried=4,400
machine\system\currentcontrolset\services\tcpip\parameters\nonamereleaseondemand=4,1
machine\system\currentcontrolset\services\tcpip\parameters\synattackprotect=4,2
machine\system\currentcontrolset\services\tcpip\parameters\performrouterdiscovery=4,0
machine\system\currentcontrolset\services\tcpip\parameters\keepalivetime=4,300000
machine\system\currentcontrolset\services\tcpip\parameters\enablepmtudiscovery=4,0
machine\system\currentcontrolset\services\tcpip\parameters\enableicmpredirect=4,0
machine\system\currentcontrolset\services\tcpip\parameters\enablefragmentchecking=4,1
machine\system\currentcontrolset\services\tcpip\parameters\enabledeadgwdetect=4,0
machine\system\currentcontrolset\services\tcpip\parameters\enableaddrmaskreply=4,0
machine\system\currentcontrolset\services\tcpip\parameters\disableipsourcerouting=4,2
machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey=4,0
machine\system\currentcontrolset\services\netbt\parameters\nonamereleaseondemand=4,1
machine\system\currentcontrolset\services\mrxsmb\parameters\refusereset=4,1
machine\system\currentcontrolset\services\ldap\ldapclientintegrity=4,1
machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature=4,0
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature=4,1
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword=4,0
machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess=4,1
machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature=4,0
machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionshares=7,
machine\system\currentcontrolset\services\lanmanserver\parameters\hidden=4,1
machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature=4,1
machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff=4,1
machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect=4,30
machine\system\currentcontrolset\services\eventlog\security\warninglevel=4,90
machine\system\currentcontrolset\services\cdrom\autorun=4,1
machine\system\currentcontrolset\services\afd\parameters\minimumdynamicbacklog=4,20
machine\system\currentcontrolset\services\afd\parameters\maximumdynamicbacklog=4,20000
machine\system\currentcontrolset\services\afd\parameters\enabledynamicbacklog=4,1
machine\system\currentcontrolset\services\afd\parameters\enableicmpredirect=4,0
machine\system\currentcontrolset\services\afd\parameters\dynamicbackloggrowthdelta=4,10
machine\system\currentcontrolset\control\session manager\subsystems\optional=7,
machine\system\currentcontrolset\control\session manager\safedllsearchmode=4,1
machine\system\currentcontrolset\control\session manager\protectionmode=4,1
machine\system\currentcontrolset\control\session manager\memory management\clearpagefileatshutdown=4,1
machine\system\currentcontrolset\control\session manager\kernel\obcaseinsensitive=4,1
machine\system\currentcontrolset\control\securityproviders\schannel\protocols\ssl 2.0\server\enabled=3,0
machine\system\currentcontrolset\control\print\providers\lanman print services\servers\addprinterdrivers=4,1
machine\system\currentcontrolset\control\lsa\restrictanonymoussam=4,1
machine\system\currentcontrolset\control\lsa\restrictanonymous=4,1
machine\system\currentcontrolset\control\lsa\nolmhash=4,1
machine\system\currentcontrolset\control\lsa\nodefaultadminowner=4,0
machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel=4,5
machine\system\currentcontrolset\control\lsa\limitblankpassworduse=4,1
machine\system\currentcontrolset\control\lsa\fullprivilegeauditing=3,0
machine\system\currentcontrolset\control\lsa\forceguest=4,0
machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous=4,0
machine\system\currentcontrolset\control\lsa\disabledomaincreds=4,1
machine\system\currentcontrolset\control\lsa\crashonauditfail=4,1
machine\system\currentcontrolset\control\lsa\auditbaseobjects=4,0
machine\system\currentcontrolset\control\filesystem\ntfsdisable8dot3namecreation=4,1
machine\software\microsoft\drwatson\createcrashdump=4,1
machine\software\policies\microsoft\cryptography\forcekeyprotection=4,2
machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon=4,0
machine\software\microsoft\windows\currentversion\policies\system\scforceoption=4,0
machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext=7,This is a private computer system
machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption=1,"A T T E N T I O N !"
machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername=4,1
machine\software\microsoft\windows\currentversion\policies\system\disablecad=4,0
machine\software\microsoft\windows\currentversion\policies\explorer\nodrivetypeautorun=4,255
machine\software\microsoft\windowsnt\currentversion\aedebug\auto=4,1
machine\software\microsoft\windowsnt\currentversion\winlogon\autoadminlogon=4,0
machine\software\microsoft\windows nt\currentversion\winlogon\passwordexpirywarning=4,14
machine\software\microsoft\windows nt\currentversion\winlogon\cachedlogonscount=1,"0"
machine\software\microsoft\windows nt\currentversion\winlogon\allocatefloppies=1,"1"
machine\software\microsoft\windows nt\currentversion\winlogon\allocatedasd=1,"0"
machine\software\microsoft\windows nt\currentversion\winlogon\allocatecdroms=1,"1"
machine\software\microsoft\windows nt\currentversion\setup\recoveryconsole\setcommand=4,0
machine\software\microsoft\windows nt\currentversion\setup\recoveryconsole\securitylevel=4,0
machine\software\microsoft\driver signing\policy=3,1

[Privilege Rights]
seassignprimarytokenprivilege = *S-1-5-20,*S-1-5-19
seauditprivilege = *S-1-5-20,*S-1-5-19
sebackupprivilege = *S-1-5-32-544
sebatchlogonright =
secreatepagefileprivilege = *S-1-5-32-544
secreatepermanentprivilege =
secreatetokenprivilege =
sedebugprivilege =
sedenybatchlogonright = *S-1-5-32-546
sedenynetworklogonright = *S-1-5-7
sedenyremoteinteractivelogonright = *S-1-5-32-546
seenabledelegationprivilege =
seimpersonateprivilege = *S-1-5-20,*S-1-5-19
seincreasebasepriorityprivilege = *S-1-5-32-544
seincreasequotaprivilege = *S-1-5-32-544
seinteractivelogonright = *S-1-5-32-544
seloaddriverprivilege = *S-1-5-32-544
selockmemoryprivilege = *S-1-5-32-544
semachineaccountprivilege =
semanagevolumeprivilege = *S-1-5-32-544
senetworklogonright = *S-1-5-11,*S-1-5-32-544
seprofilesingleprocessprivilege = *S-1-5-32-544
seremoteinteractivelogonright = *S-1-5-32-544
seremoteshutdownprivilege = *S-1-5-32-544
serestoreprivilege = *S-1-5-32-544
sesecurityprivilege = *S-1-5-32-544
seservicelogonright = *S-1-5-20
seshutdownprivilege = *S-1-5-32-544
sesyncagentprivilege =
sesystemenvironmentprivilege = *S-1-5-32-544
sesystemprofileprivilege = *S-1-5-32-544
sesystemtimeprivilege = *S-1-5-32-544
setakeownershipprivilege = *S-1-5-32-544
setcbprivilege =
seundockprivilege = *S-1-5-32-544

[Registry Keys]
1="classes_root", 2, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
2="machine\software", 2, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
3="machine\software\microsoft\netdde", 2, "DAR(A;CI;KA;;;BA)(A;CI;KA;;;SY)"
4="machine\software\microsoft\windows nt\currentversion\asr\commands", 2, "DAR(A;CI;KA;;;BA)(A;CI;CCDCLCSWRPSDRC;;;BO)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
5="machine\software\microsoft\windows\currentversion\group policy", 0, "DAR(A;CI;KA;;;BA)(A;CI;KR;;;AU)(A;;CC;;;CO)(A;CI;KA;;;SY)"
6="machine\software\microsoft\windows\currentversion\installer", 0, "DAR(A;CI;KA;;;BA)(A;CI;KA;;;BO)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
7="machine\software\microsoft\windows\currentversion\policies", 0, "DAR(A;CI;KA;;;BA)(A;CI;KA;;;BO)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
8="machine\system", 2, "DAR(A;CI;KA;;;BA)(A;CI;KA;;;BO)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
9="machine\system\currentcontrolset", 0, "DAR(A;CI;KA;;;BA)(A;;CCDCLCSWRPWPSDRC;;;BO)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
a="machine\system\currentcontrolset\control\securepipeservers\winreg", 2, "DAR(A;CI;KA;;;BA)(A;;KR;;;BO)(A;CI;KA;;;SY)"
b="machine\system\currentcontrolset\control\wmi\security", 2, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)"
c="machine\system\currentcontrolset\enum", 1, "DAR(A;CI;KA;;;BA)(A;CI;KR;;;AU)(A;CI;KA;;;SY)"
d="machine\system\currentcontrolset\hardware profiles", 0, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
e="machine\system\currentcontrolset\services\messenger", 1, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
f="machine\system\currentcontrolset\services\snmp\parameters\permittedmanagers", 2, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)"
10="machine\system\currentcontrolset\services\snmp\parameters\validcommunities", 2, "DAR(A;CI;KA;;;BA)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)"
11="users\.default", 2, "DAR(A;CI;KA;;;BA)(A;CI;KA;;;BO)(A;CIIO;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KR;;;BU)"
12="users\.default\software\microsoft\netdde", 2, "DAR(A;CI;KA;;;BA)(A;CI;KA;;;SY)"

[File Security]
1="c:\", 1, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
2="c:\autoexec.bat", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
3="c:\boot.ini", 2, "DAR(A;;FA;;;BA)(A;;FA;;;SY)"
4="c:\config.sys", 2, "DAR(A;;FA;;;BA)(A;;FA;;;SY)(A;;0x1200a9;;;BU)"
5="c:\documents and settings", 0, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
6="c:\documents and settings\administrator", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
7="c:\documents and settings\all users", 0, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
8="c:\documents and settings\default user", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
9="c:\inetpub", 1, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
a="c:\io.sys", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
b="c:\msdos.sys", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
c="c:\ntdetect.com", 2, "DAR(A;;FA;;;BA)(A;;FA;;;SY)"
d="c:\ntldr", 2, "DAR(A;;FA;;;BA)(A;;FA;;;SY)"
e="c:\program files", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
f="c:\system volume information", 1, "DAR"
10="c:\temp", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;CI;DCLCWP;;;BU)"
11="c:\windows", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
12="c:\windows\debug", 0, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
13="c:\windows\debug\usermode", 0, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;;CCDCWP;;;BU)(A;OIIO;DCLC;;;BU)"
14="c:\windows\offline web pages", 1, "D:AR(A;OICI;FA;;;WD)"
15="c:\windows\regedit.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
16="c:\windows\registration", 0, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;FR;;;BU)"
17="c:\windows\repair", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
18="c:\windows\security", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)"
19="c:\windows\system32", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
1a="c:\windows\system32\config", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
1b="c:\windows\system32\dllcache", 2, "D(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)"
1c="c:\windows\system32\grouppolicy", 0, "DAR(A;OICI;FA;;;BA)(A;OICI;0x1200a9;;;AU)(A;OICI;FA;;;SY)"
1d="c:\windows\system32\ias", 2, "D(A;OICI;GA;;;BA)(A;OICI;GA;;;SY)(A;OICI;GA;;;CO)"
1e="c:\windows\system32\ntbackup.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
1f="c:\windows\system32\rcp.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
20="c:\windows\system32\regedt32.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
21="c:\windows\system32\rexec.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
22="c:\windows\system32\rsh.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
23="c:\windows\system32\secedit.exe", 2, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)"
24="c:\windows\system32\setup", 0, "DAR(A;OICI;FA;;;BA)(A;OICI;FA;;;SY)(A;OICI;0x1200a9;;;BU)"
25="c:\windows\system32\spool\printers", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;CI;DCLCSWWPLO;;;BU)"
26="c:\windows\tasks", 1, "D:AR"
27="c:\windows\temp", 2, "DAR(A;OICI;FA;;;BA)(A;OICIIO;FA;;;CO)(A;OICI;FA;;;SY)(A;CI;0x100026;;;BU)"

[Service General Setting]
1="6to4", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2="alerter", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3="alg", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4="appmgmt", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5="appmgr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6="appmon", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7="aspnet_state", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
8="audiosrv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
9="binlsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
a="bits", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
b="browser", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
c="certsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
d="cisvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
e="clipsrv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
f="clussvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
10="comsysapp", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
11="corrtsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
12="cryptsvc", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
13="dfs", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
14="dhcp", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
15="dhcpserver", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
16="dmadmin", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
17="dmserver", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
18="dns", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
19="dnscache", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
1a="elementmgr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
1b="ersvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
1c="eventlog", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
1d="eventsystem", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
1e="fastuserswitchingcompatibility", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
1f="fax", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
20="groveler", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
21="helpsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
22="hidserv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
23="httpfilter", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
24="ias", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
25="iasjet", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
26="iisadmin", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
27="imapiservice", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
28="irmon", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
29="ismserv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2a="kdc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2b="lanmanserver", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2c="lanmanworkstation", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2d="licenseservice", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2e="lmhosts", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
2f="lpdsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
30="macfile", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
31="macprint", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
32="messenger", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
33="mnmsrvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
34="mqds", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
35="mqtgsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
36="msdtc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
37="msftpsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
38="msiserver", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
39="msmq", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3a="mssql$uddi", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3b="mssql$webdb", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3c="mssqlserver", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3d="mssqlserveradhelper", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3e="netdde", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
3f="netddedsdm", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
40="netlogon", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
41="netman", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
42="nla", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
43="nntpsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
44="ntfrs", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
45="ntlmssp", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
46="ntmssvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
47="nwcworkstation", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
48="nwsapagent", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
49="plugplay", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4a="policyagent", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4b="pop3svc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4c="protectedstorage", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4d="rasauto", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4e="rasman", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
4f="rdsessmgr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
50="remote_storage_server", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
51="remote_storage_user_link", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
52="remoteaccess", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
53="remoteregistry", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
54="rpclocator", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
55="rpcss", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
56="rsopprov", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
57="sacsvr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
58="saldm", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
59="samss", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5a="scardsvr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5b="schedule", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5c="seclogon", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5d="sens", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5e="sharedaccess", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
5f="shellhwdetection", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
60="simptcp", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
61="smtpsvc", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
62="snmp", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
63="snmptrap", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
64="spooler", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
65="sptimer", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
66="sqlagent$webdb", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
67="sqlserveragent", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
68="srvcsurg", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
69="sshsecureshell2server", 2, "DA;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;AU)(A;;CCLCSWRPWPDTLOCRRC;;;PU)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6a="stisvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6b="swprv", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6c="sysmonlog", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6d="tapisrv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6e="termservice", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
6f="termservlicensing", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
70="tftpd", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
71="themes", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
72="tlntsvr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
73="trksvr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
74="trkwks", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
75="tssdis", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
76="uploadmgr", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
77="ups", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
78="vds", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
79="vss", 3, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7a="w32time", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7b="w3svc", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7c="webclient", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7d="windowssystemresourcemanager", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7e="winhttpautoproxysvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
7f="winmgmt", 2, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
80="wins", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
81="winsip", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
82="wmdmpmsn", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
83="wmi", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
84="wmiapsrv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
85="wmserver", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
86="wuauserv", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"
87="wzcsvc", 4, "D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)SAU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"

 

[tfg13]

Did you happen to notice these 2 entries?

; - protect against computer browser spoofing attacks \parameters\refusereset=4,1
; - hide computer from browser lists \parameters\hidden=4,1

These may be the two that are effecting you.