F

D

DACL (discretionary access control list), 138, 175, 175

daemons, 241

Data Execution Prevention (DEP), turning off, 8

data, removal from decommissioned computer, 225

data

storage by applications, 111

location, 115

database, as store for BCD, 10

debug programs, privilege for, 71

/debug switch, in boot.ini, 9

decrypting key, 188

default entry, changing for Windows Boot Manager, 13-14

{default} identifier, in OS entry, 12, 13

default key protectors, 195

delay in rebooting, 51-52

delayed services

low priorities for, 52

deleting

files

denying deletes, 164

failure of blocking, 165

operating system (OS) entry, 16

Windows integrity control and, 160-166

deny permissions, 73

DEP (Data Execution Prevention), turning off, 8

description, in OS entry, 12

developers, service privileges reduction, 248

device drivers. See drivers

Device Manager, 235

"Devices: Unsigned driver installation behavior" setting, 30

DFS$ share, 27

dialog boxes, commonly used, 87

diffuser, two-pass, in BitLocker, 192

"digest" logon mechanism, for winrm, 56

digital signatures

application deployment after adding, 239

embedding manifests and, 95-97

requiring for applications, 109-111

value of, 110

web resources, 239

disabling

BitLocker Drive Encryption, 194-195, 223

for BIOS upgrade, 225

PatchGuard, 232-233

Secure Desktop, 107

disaster, preparing for, 216

discoverability, 41

discretionary access control list (DACL), 138, 175, 175

discretionary access controls, 132

vs. mandatory, 133-139

overview and terminology, 136-138

disk, 189

Diskpart tool, 202

display name, 245

DLLs (dynamic link libraries) load order shuffling, 229

manifest and, 87

Documents and Settings folder (Windows 2000), 16

domain administrator account, 2

domain controllers, 28

domain ID, 67

downloading chml, 144

drive, 189

wiping, 226

drivers

boot-start, 237

certificates for, 30

code signing, 238-239

deployment after signing by publisher, 239

displaying during boot process, 15

privilege for loading and unloading, 71

problems from, 122

troubleshooting, 234-235

warnings of unsigned, 30-31

dynamic link libraries (DLLs) load order shuffling, 229

manifest and, 87