Configuration should include establishing or following
password policy
access control
audit policy
kernel-mode driver configuration procedures.