|
|
 |
 |
 Events
Jobs
Premium Services
Media Kit
Network Map
E-mail Offers
Vendor Solutions
Webcasts
|
|
|
[
Home | Discussion Forum | How Do I... |
Lotus Notes Intranets |
Microsoft SharePoint |
Products |
Shopping
]
It's Easy to Secure Windows 2000 Servers, Part 3
Laura Taylor 5/3/2005 Go to page: 1 2 In the first two parts of this series, you learned how to use Microsoft's Management Console (MMC) to automatically configure and enforce security policies by creating security templates. You also learned how to create a security template and assign Account Policies, Local Policies, and Event Log security policies to it for a basic Windows 2000 server. In Part 3, I'll teach you how to configure and assign System Services, Registry Settings, and File System Settings security policies. Refreshing Our First Two Lessons Before I show you how to create a different template for specific server types such as a DNS server, a DHCP server, and an Exchange server, we need to finish learning how to configure the remaining policies for a basic Windows 2000 server. By using security templates you can ensure that security policies are automated. Once a template is in place the policies are regenerated and loaded into memory each time a system is re-started. As you'll recall, to get to the screen where you do the actual policy configuration, you first need to start up the Microsoft Management Console. You can do this from the Start menu by opening up the Run box and typing MMC as shown below.
Starting the MMC. After you add the Security Template snap-in (explained in Part 1 of this series), you need to select the template called basicsv, and then open the System Services configuration window as illustrated below.
The System Services Configuration Window. You are now ready to configure and assign System Services settings. The System Services settings allow you to stipulate which services get launched on startup. You can configure the System Services in the same method you configured the Local Policy settings and the Event Log settings. Configuring and Assigning System Services Security Policies The System Services settings should be unique to your organization, and should be a topic of discussion among the systems administrators before you configure them. Keeping that in mind, Table 1 shows an example list of System Service settings designed for a typical, client-server enterprise architecture. Your organization may actually have more services installed on its servers than the ones listed in Table 1. When you install a new server application it usually adds new services to Systems Services list. The applications that you have running on your server will determine what applications show up in the System Services setting list. The list on your server is likely to be slightly different than the list in Table 1. You will also notice that your Windows 2000 services, as well as your application services, are both mixed together in this list and are listed in alphabetical order. When configure System Settings, you will want to give the Administrators group full control. To configure the System settings on a group-by-group basis, you need to double-click on the Service name, and then click the Edit Security button as shown in below. You will then see the Allow/Deny security settings by group.
Configuring Security Policy Settings. In most cases, the group known as Authenticated Users should never have Full Control and their settings for most applications should be set to more restrictive settings such as Read access as shown below.
Authenticated Users Have Limited Control. You will need to step through this process for each and every application and each and every group. It is important that you know what you are doing when you apply these configuration controls. If you are unsure, leave the default settings in place.
Go to page: 1 2
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Intranet Journal's Tutorials |
|
Managing Editor |
The Network for Technology Professionals
Legal Notices, Licensing, Permissions, Privacy Policy.
Advertise | Newsletters | E-mail Offers
|
Helpful Cloud Computing Resources |
MORE WHITEPAPERS, EBOOKS, AND ARTICLES |
|
User Experience Management Indicators for Business and IT Success Ensuring Performance Meets Business and Web User Needs |
MORE WEBCASTS, PODCASTS, AND VIDEOS |
|
MORE DOWNLOADS, EKITS, AND FREE TRIALS |
