235-Communities

Computer/User Node :

   MACHINE

Policy Path :

   Administrative Templates\Network\SNMP

Supported on :

   At least Microsoft Windows XP Professional or Windows Server 2003 family

Help/Explain Text :

   Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service. SNMP is a protocol designed to give a user the capability to remotely manage a computer network, by polling and setting terminal values and monitoring network events. A valid community is a community recognized by the SNMP service, while a community is a group of hosts (servers, workstations, hubs, and routers) that are administered together by SNMP. The SNMP service is a managed network node that receives SNMP packets from the network. If you enable this setting, the SNMP agent only accepts requests from management systems within the communities it recognizes, and only SNMP Read operation is allowed for the community. If you disable or do not configure this setting, the SNMP service takes the Valid Communities configured on the local computer instead. Best Practice: For security purposes, it is recommended to restrict the HKLM\SOFTWARE\Policies\SNMP\Parameters\ValidCommunities key to allow only the local admin group full control. Note: It is good practice to use a cryptic community name. Note: This setting has no effect if the SNMP agent is not installed on the client computer. Also, see the other two SNMP settings: Permitted Managers and Trap Configuration.

Registry Settings :

  HKLM\Software\Policies\SNMP\Parameters\ValidCommunities!{1,2,3,...}