Re: ClearVirtual Mem PgFile Shutdown

It depends on your need.
Enabling this requires overwrite/scrubbing during the shutdown
process, meaning there is a noticable performance change.
The reality is that to make use of the pagefile one must have
possession of the machine, have skill to get at and knowingly
thread through the pagefile, have the ability to recognize what
is of interest there, etc.
and
one needs to assess the likelihood of someone/some agent like
that actually targetting your company, and acquiring machine(s)
and
then what happens if your users hibernate the machine instead
of doing a shutdown?

As with a number of other things in the compliance guidelines,
their usefulness may be more in the appearance of things than
in their reality, and, they seem more prescribed by bean counters
than technically comprehending individuals.

Roger


"al" <al@xxxxxxxxxxx> wrote in message
news:1176945641.240581.248630@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I am wondering what folks thing of enabling this GPO setting on
workstations (mobiles):
Computer Configuration
Windows Settings
Security Settings
Local Policies
Security Options
Shutdown: Clear virtual memory pagefile Disabled

I realize it would "speed" the startup and shutdown for mobile users
however, I am concerned about security. I have not seen this
"disabled" setting encouraged on any groups I've searched. I was just
wondering what folks thought and were implementing at their sites.

TIA
Al



.

Relevant Pages

  • [patch 09/38] pm: io subchannel driver power management callbacks
    ... .probe = io_subchannel_probe, ... .shutdown = io_subchannel_shutdown, ... "Reality continues to ruin my life." ...
    (Linux-Kernel)
  • Re: Event ID 513 not logged at shutdown
    ... not show up in reality on all OS builds... ... > User Manager, Policies, Audit, Audit these events, checked ... > shutdown, although event ID 512 does show up indicating ...
    (microsoft.public.win2000.security)
  • RE: How do I see pagefile.sys?
    ... How to disable "clear pagefile at shutdown". ... exclusively by the operating system, ... Start Registry Editor and navigate to the following key: ...
    (microsoft.public.windowsxp.general)
  • Re: Windows shutting down
    ... When you shutdown your Windows XP computer, it may take more time to ... Virtual memory support uses a system pagefile to swap pages of memory to ... Start Registry Editor and navigate to the following key: ...
    (microsoft.public.windowsxp.general)
  • Re: pagefile.sys, can it be deleted?
    ... Clear Paging File at Shutdown doesn't delete the pagefile, it clears the contents of the file by zero filling the file. ... For obvious reasons the operating system has an exclusive lock on the pagefile so it cannot be deleted while Windows is up and running. ...
    (microsoft.public.windowsxp.setup_deployment)