You're Reading a Free Preview
Pages 21 to 308 are not shown in this preview.
Pages 21 to 308 are not shown in this preview.
You're Reading a Free Preview
Pages 329 to 383 are not shown in this preview.
Pages 329 to 383 are not shown in this preview.
You're Reading a Free Preview
Pages 404 to 424 are not shown in this preview.
Pages 404 to 424 are not shown in this preview.
You're Reading a Free Preview
Pages 448 to 522 are not shown in this preview.
Pages 448 to 522 are not shown in this preview.
of 00
Windows Server 2003 Security Cookbook; Security Solutions and Scripts for System Administrators
In the last few years, security has become a hot-button issue for IT organizations of all sizes. Accordingly, many of the security features that were either optional or suspect...
(More)
7,446 Reads
Info and Rating
| Category: | |
| Rating: | (8 Ratings) |
| Upload Date: | 05/16/2009 |
| Copyright: | Traditional Copyright: All rights reserved |
| Tags: |
This is a Free Preview
With this purchase, you can read the entire document on Scribd, download (as PDF), and print.
TIP Press Ctrl-F⌘F to quickly search anywhere in the document.
Search History:
Result 00 of 00
00 results for result for
p.
Sections
- Preface
- Chapter 1
- CHAPTER 1
- Getting Started
- What Is Security?
- Approach to the Book
- Where to Find the Tools
- Group Policy Notes
- Programming Notes
- Replaceable Text
- Reporting Security Issues to Microsoft
- Where to Find More Information
- Command-Line Tools
- Chapter 2
- CHAPTER 2
- System Preparation and Administration
- 2.1Creating a Reference Installation
- 2.2Renaming the Domain Administrator Account
- 2.3Renaming the Local Administrator Accounts
- 2.4Disabling the Local Administrator Accounts
- 2.5Renaming the Guest Account
- 2.6Logging in as a Non-Administrator
- 2.7Configuring Internet Explorer Enhanced Security Configuration
- 2.8Preventing Automatic Installation of New Hardware Drivers
- 2.9Protecting Against Modified Device Drivers
- 2.10Encrypting the SAM
- 2.11Locking the Console
- 2.12Enabling Screensaver Locking
- TCP/IP
- 3.1Displaying the Status of TCP Ports
- 3.2Disabling NetBIOS over TCP/IP
- 3.3Disabling File and Printer Sharing for Microsoft Networks
- 3.4Enabling SYN Flood Protection
- 3.5Disabling Source Routing
- 3.6Disabling Router Discovery
- 3.8Enabling and Configuring Windows Firewall
- Chapter 4
- CHAPTER 4
- Encrypting File System
- 4.1Enabling EFS Without a Recovery Agent
- 4.4Encrypting a File
- 4.5Encrypting a Folder
- 4.6Enabling EFS Context Menus
- 4.7Viewing Users and Recovery Agents
- 4.8Moving or Copying an Encrypted File or Folder
- 4.9Changing Encryption Algorithms
- 4.11Sharing Encrypted Files
- 4.12Backing Up EFS Keys
- 4.13Using a Recovery Agent
- 4.14Removing Unused Data
- Chapter 5
- CHAPTER 5
- Active Directory
- 5.1Enabling SSL/TLS
- 5.2Encrypting LDAP Traffic with SSL or TLS; Digital Signing
- 5.3Using the Delegation of Control Wizard
- Recipe 5.4 for customizing the Delegation of Control wizard
- 5.4Customizing the Delegation of Control Wizard
- 5.5Using the Default ACL for an Objectclass
- 5.6Enabling List Object Access Mode
- 5.7Modifying the ACL on Administrator Accounts
- 5.8Viewing and Purging Your Kerberos Tickets
- 5.9Resetting the Directory Service Restore Mode Administrator Password
- 5.10Implementing Role-Based Access Control
- 5.11Displaying Delegated Rights
- 5.12Removing Delegated Rights
- Chapter 6
- CHAPTER 6
- Group Policy
- 6.1Creating a GPO
- 6.2Copying a GPO
- 6.3Deleting a GPO
- 6.4Modifying the Settings of a GPO
- 6.5Creating a GPO Link to an OU
- 6.6Blocking Inheritance of GPOs on an OU
- 6.7Forcing a GPO Application
- 6.8Applying a Security Filter to a GPO
- 6.9Refreshing GPO Settings on a Computer
- 6.10Configuring the Group Policy Refresh Interval
- 6.11Installing Applications with a GPO
- 6.12Assigning Logon/Logoff and Startup/Shutdown Scripts in a GPO
- 6.13Configuring Password Policies
- 6.14Configuring Account Lockout Policies
- 6.15Configuring Kerberos Policies
- 6.16Configuring User Rights Assignment
- 6.18Configuring Time Synchronization Settings
- 6.19Using Restricted Groups
- 6.20Configuring Service Parameters
- 6.21Configuring Registry Permissions
- 6.22Configuring File Permissions
- Chapter 7
- CHAPTER 7
- Security Templates
- 7.1Using Default Security Templates
- 7.2Creating a Security Template
- 7.3Changing Account Policies
- 7.4Changing Local Policies
- 7.5Changing Event Log Settings
- 7.6Making Group Membership Changes
- 7.7Disabling Unwanted System Services
- 7.8Modifying Registry Permissions
- 7.9Modifying Filesystem Permissions
- 7.10Exporting Security Templates
- 7.11Importing Security Templates
- 7.12Verifying Template Application
- 7.13Analyzing a Security Configuration
- 7.14Testing Template Compatibility
- Domain Controllers
- 8.1Disabling LM Hash Storage
- 8.2Removing Stored LM Hashes
- 8.3Requiring NTLM Authentication
- 8.4Using Syskey to Thwart Offline Attacks
- 8.5Signing LDAP Communications
- 8.6Hardening Domain Controllers with Security Templates
- Chapter 9
- CHAPTER 9
- User and Computer Accounts
- 9.1Enabling and Disabling a User
- 9.2Finding Disabled Users
- 9.3Unlocking a User
- 9.4Troubleshooting Account Lockout Problems
- 9.5Viewing and Modifying the Account Lockout and Password Policies
- 9.6Setting a User’s Account to Expire
- 9.7Setting a User’s Password
- 9.8Forcing a User Password Change at Next Logon
- 9.9Preventing a User’s Password from Expiring
- You want to prevent a user’s password from expiring
- 9.10Setting a User’s Account Options
- 9.11Finding a User’s Last Logon Time
- 9.12Restricting a User’s Logon Hours and Workstations
- 9.13Resetting a Computer Account
- 9.14Finding Inactive or Unused Computer Accounts
- 9.15Trusting a Computer Account for Delegation
- Rights and Permissions
- 10.0Introduction
- 10.1Using Standard File Permissions
- 10.2Using Special File Permissions
- 10.3Determining File Permission Inheritance
- 10.4Using Deny Permission
- 10.5Determining Effective Permissions
- 10.6Determining File Ownership
- 10.7Modifying File Ownership
- 10.8Restoring Default Permissions
- 10.9Hardening Registry Permissions
- 10.10Restricting Remote Access to the Registry
- Chapter 11
- CHAPTER 11
- Dynamic Host Configuration Protocol
- 11.0Introduction
- 11.1Authorizing a DHCP Server
- 11.2Detecting Rogue DHCP Servers
- 11.3Restricting DHCP Administrators
- 11.4Disabling NetBIOS over TCP/IP Name Resolution
- 11.5Enabling Dynamic DNS Updates from the DHCP Server
- 11.6Running DHCP Server on a Domain Controller
- Domain Name System
- 12.0Introduction
- 12.1Securing DNS Using the Separate Namespaces Approach
- 12.2Securing DNS Using the Split-Brain Approach
- 12.3Restricting DNS Administration Using the DNSAdmins Group
- DNSAdmins group:
- 12.4Hiding Your Internal IP Addressing Scheme
- 12.5Blocking Unwanted DNS Traffic Through a Firewall
- 12.7Preventing DoS Attacks by Disabling Recursion
- 12.8Hardening DNS by Converting Standard Zones to Active Directory Integrated
- 12.9Protecting DNS Zones by Requiring Only Secure Dynamic Updates
- 12.10Hardening DNS Clients by Requiring Them to Use Secure Dynamic Updates
- 12.11Protecting DNS Zones by Disabling Dynamic Updates
- 12.12Hardening DNS Clients by Preventing Them from Attempting Dynamic Updates
- 12.13Preventing Unauthorized Zone Transfers
- 12.14Restricting Zone Transfers to Legitimate DNS Servers
- 12.15Preventing Cache Pollution on DNS Servers
- 12.16Monitoring Suspicious DNS Requests Using Debug Logging
- 12.17Securing Resource Records When Using the DnsUpdateProxy Group
- 12.18Preventing DNS Session Sniffing and Hijacking
- File and Print Servers
- 13.0Introduction
- 13.1Creating a Hidden File Share
- 13.2Deleting a File Share
- 13.3Securing Shared Folders and Files
- 13.4Preventing Shared File Caching
- 13.5Determining Access Levels for a File Share
- 13.6Listing All File Shares
- 13.7Restricting Printing Permissions
- 13.8Hardening the Print Spooler
- 13.9Moving the Print Spool Folder
- 13.10Disabling Internet Printing
- 13.11Removing Internet Printing
- Chapter 14
- CHAPTER 14
- IPsec
- 14.0Introduction
- 14.1Using a Default IPsec Policy
- 14.2Creating an IPsec Policy
- 14.3Creating a Blocking Rule
- 14.4Creating a Permit Rule
- 14.6Configuring Authentication Methods
- 14.9Configuring Session Cryptography
- 14.10Configuring IP Filter Lists
- 14.11Configuring IP Filter Actions
- 14.13Activating an IPsec Rule
- 14.14Deactivating an IPsec Rule
- 14.15Assigning and Unassigning IPsec Policies
- 14.16Viewing IPsec Statistics with System Monitor
- 14.17Verifying IPsec Traffic
- 14.18Using IPsec Monitor to Verify IPsec
- 14.19Troubleshooting IPsec Connections
- Chapter 15
- CHAPTER 15
- Internet Information Services
- 15.0Introduction
- 15.2Removing Unused Components
- 15.3Configuring HTTP Authentication
- Digest authentication
- 15.4Configuring FTP Authentication
- 15.5Changing the User Context for Anonymous Access
- 15.6Disabling Anonymous Access
- 15.7Restricting Client Access by ACL
- 15.8Restricting Client Access by IP Address or DNS Name
- 15.9Installing Server Certificates
- 15.10Enabling Secure Sockets Layer
- 15.11Enabling Client Certificate Authentication
- 15.12Requiring Client Certificate Authentication
- Chapter 16
- CHAPTER 16
- RRAS and IAS
- 16.0Introduction
- 16.1Configuring the Routing and Remote Access Server
- 16.2Allowing Authentication Protocols
- Microsoft encrypted authentication Version 2 (MS-CHAP v2)
- Microsoft encrypted authentication (MS-CHAP)
- Shiva Password Authentication Protocol (SPAP)
- 16.3Requiring Smart Card Authentication
- 16.4Using Preshared Keys
- 16.6Installing Internet Authentication Service
- 16.10Creating a Remote Access Policy
- Terminal Services and Remote Desktop
- 17.0Introduction
- 17.1Choosing a Security Mode
- 17.3Limiting Client Sessions
- 17.4Requiring a Password for Connection
- 17.5Securing RPC Administration Traffic
- 17.6Allowing Silent Session Monitoring
- 17.7Monitoring Sessions
- 17.8Enabling Remote Desktop
- 17.9Configuring Access to Remote Desktop
- Chapter 18
- CHAPTER 18
- Public Key Infrastructure and Certificates
- 18.0Introduction
- Certificates snap-in
- 18.2Installing an Enterprise Subordinate CA
- 18.3Installing a Standalone Subordinate CA
- 18.4Publishing a CRL from an Online CA
- 18.5Publishing a CRL from an Offline CA
- 18.6Restricting Access to the CA
- 18.7Auditing CA Operations
- 18.9Authorizing the CA to Issue Certificates
- 18.10Archiving Private Keys
- 18.11Sending Enrollment Notifications via Email
- 18.12Requesting Certificates Automatically
- 18.13Approving and Denying Certificate Requests
- 18.14Retrieving Issued Certificates
- 18.18Identifying Local Certificates and Private Keys
- 18.19Backing Up Certificates and Private Keys
- 18.20Restoring Certificates and Private Keys
- Chapter 19
- CHAPTER 19
- Auditing
- 19.0Introduction
- 19.1Auditing Account Logon Events
- 19.2Auditing Account Management Events
- 19.3Auditing Directory Service Events
- 19.4Auditing File Access
- 19.5Auditing File Share Configuration Events
- 19.6Auditing Web Server Access
- 19.7Auditing Policy Change Events
- 19.8Auditing Privilege Use Events
- 19.9Auditing Process Tracking Events
- 19.10Auditing System Events
- 19.11Shutting Down Windows When Unable to Log Events
- Chapter 20
- CHAPTER 20
- Event Logs
- 20.0Introduction
- 20.1Viewing Events
- 20.2Setting the Maximum Size of an Event Log
- 20.3Setting the Event Log Retention Policy
- 20.4Clearing the Events in an Event Log
- 20.5Restricting Access to an Event Log
- 20.6Searching the Event Logs on Multiple Servers
- 20.7Archiving an Event Log
- 20.8Finding More Information About an Event
- 20.9Triggering an Action when an Event Occurs
- 20.10Consolidating Event Logs
- Patch Management
- 21.0Introduction
- 21.1Installing a Root Update Server
- 21.2Installing a Subordinate Update Server
- 21.3Installing a Nonstoring Update Server
- 21.4Installing an Update Server on a Nondedicated Server
- 21.5Configuring Computers to Use the Internal Update Server
- 21.6Refreshing the Update Server
- 21.7Configuring the Computer Update Type and Schedule
- 21.8Creating a Test Group
- 21.9Approving and Declining Updates
- 21.10Automatically Approving Critical Updates
- 21.11Removing Updates
- 21.12Forcing an Update Scan
- 21.13Manually Applying Updates
- 21.14Disabling Windows Update
- 21.15Checking Status of Update Application
- 21.16Verifying Update Application with MBSA
- Index
More from This User
Related Documents
More From This User
Privacy and Big Data
Much of what constitutes Big Data is information about us. Through our online...
Take Control of Your 802.11n AirPort Network
If you're trying to solve a particular problem, you can jump in and read the ...
Playful Design
Game design is a sibling discipline to software and Web design, but they're s...
Architecting Mobile Solutions for the Enterprise
Your guide to planning and executing a complete mobile web strategyRevisit yo...
Adobe Edge Preview 5: The Missing Manual
Want to create animated graphics for iPhone, iPad and the Web, using familiar...
Take Control of iCloud
Take Control of iCloud will teach you how to handle many aspects of iCloud, i...
Hadoop: The Definitive Guide
Ready to unlock the power of your data? With this comprehensive guide, you’ll...
Maintainable JavaScript
You may have definite ideas about writing code when working alone, but team d...
The Art of Community; Building the New Age of Participation
Online communities provide a wide range of opportunities for supporting a cau...
Beyond Point-and-Shoot; Learning to Use a Digital SLR or Interchang...
There are two types of new photographers: those satisfied with their low-cost...
Mobile Development with C#; Building Native iOS, Android, and Windo...
It’s true: you can build native apps for iOS, Android, and Windows Phone with...
Getting Started with .NET Gadgeteer
Learn how to quickly build cool electronic gadgets with .NET Gadgeteer. With ...
Inside Windows® Debugging; A Practical Guide to Debugging and Traci...
Use Windows debuggers throughout the development cycle—and build better softw...
Mobile Design Pattern Gallery, Color Edition
When you’re under pressure to produce a well designed, easy-to-navigate mobil...
The Saint Who Fought the Dragon
Kids discover the story of Saint George as he stands up for what good and tru...
Santa's Secret Story
Kids join a little girl named Rachel on a magical journey as she meets someon...
Photoshop CS6: The Missing Manual
Photoshop CS6 is truly amazing, but it can also be overwhelming if you’re jus...
Shine: Choices to Make God Smile
Shine provides examples of positive choices that help children ages 4 develop...
My First Missal (with revisions)
Kidsnd parentsill love this handy-sized missal. The parts of the Mass, prayer...
The Saints Pray for Us (ESS)
This stunning book features intercessory prayers to help children pray to the...
Catholic Family Fun
Looking for a way to bring your family together in faith and fun, but not sur...
Wisdom for Living the Final Season
Even those with a strong faith in God’s limitless mercy and may fear the proc...
Learn to Solder
Learn the fundamentals of soldering—and pick up an essential skill for buildi...
Secrets of the Spirit: Wisdom from Luis Martinez (CWC)
How do I develop a deep, loving relationship with God? Martinez, author of Th...
St. Gianna Beretta Molla
As a mother, wife, and doctor St. Gianna Molla is not your typical saint. She...
Related Docuements
Windows Server Cookbook; For Windows Server 2003 & Windows 2000
This practical reference guide offers hundreds of useful tasks for managing W...
From O'Reilly Media, Inc.
MCSE Core Required Exams in a Nutshell; The required 70: 290, 291, ...
Written by the premier author in Windows administration, William Stanek, and ...
From O'Reilly Media, Inc.
Chapter 4
Getting Microsoft Windows Server 2003 up and running, either as a standalone ...
From O'Reilly Media, Inc.
The Split DNS Architecture
Getting Microsoft Windows Server 2003 up and running, either as a standalone ...
From O'Reilly Media, Inc.
Learning Windows Server 2003
Getting Microsoft Windows Server 2003 up and running, either as a standalone ...
From O'Reilly Media, Inc.
Exam 70-270 Overview
For Windows XP and Windows Server 2003 administrators preparing forMicrosoft ...
From O'Reilly Media, Inc.
Windows XP Startup Process
For Windows XP and Windows Server 2003 administrators preparing forMicrosoft ...
From O'Reilly Media, Inc.
MCSA on Windows Server 2003 Core Exams in a Nutshell
For Windows XP and Windows Server 2003 administrators preparing forMicrosoft ...
From O'Reilly Media, Inc.
MCSE Core Elective Exams in a Nutshell; Covers exams 70-270, 70-297...
For Windows XP and Windows Server 2003 administrators preparing forMicrosoft ...
From O'Reilly Media, Inc.
Windows Server 2003 Network Administration
This book is the Windows Server version of the classic TCP/IP Network Adminis...
From O'Reilly Media, Inc.
Active Directory
Working with Microsoft's network directory service for the first time can be ...
From O'Reilly Media, Inc.
MCSA/MCSE Self-Paced Training Kit (Exam 70-290): Managing and Maint...
Get in-depth exam preparation for the updated Exam 70-290, a core MCSA/MCSE e...
From O'Reilly Media, Inc.
Deploying Virtualized Servers
Now updated for Windows Server 2008 R2, this practical, portable guide delive...
From O'Reilly Media, Inc.
Setting event Log Options
Now updated for Windows Server 2008 R2, this practical, portable guide delive...
From O'Reilly Media, Inc.
Windows Server® 2008 Administrators Pocket Consultant
Now updated for Windows Server 2008 R2, this practical, portable guide delive...
From O'Reilly Media, Inc.
Leave a Comment