Windows Server 2003 Recommended Baseline Security

Windows Server 2003
Recommended Baseline Security (ITSG-20)
Table of Contents
Foreword......................................................................................................................... i
Disclaimer of Responsibility ....................................................................................... iii
Record of Amendments................................................................................................ v
Executive Summary .................................................................................................... vii
Table of Contents......................................................................................................... ix
List of Tables .............................................................................................................. xiii
List of Figures ............................................................................................................. xv
List of Abbreviations and Acronyms....................................................................... xvii
1 Introduction......................................................................................................... 1
1.1 Background................................................................................................ 1
1.2 Aim............................................................................................................. 1
1.3 Scope......................................................................................................... 1
1.4 Approach ................................................................................................... 2
1.5 Functional and Security Testing................................................................. 2
1.6 Assumptions .............................................................................................. 2
1.7 Related documents.................................................................................... 2
1.8 Document Structure................................................................................... 2
1.9 Typographic Conventions .......................................................................... 3
1.10 Reference Documents ............................................................................... 3
2 Overview: Information Technology Security Guidance for Windows Server
2003 ..................................................................................................................... 5
2.1 How to Use This Document ....................................................................... 5
2.1.1 Installation....................................................................................... 5
2.1.2 Configuration................................................................................... 5
2.1.3 Monitoring and Enforcement ........................................................... 6
2.2 Assumptions / Restrictions......................................................................... 6
2.2.1 Installation....................................................................................... 6
2.2.2 Policy .............................................................................................. 6
2.2.3 Policy Monitoring and Enforcement................................................. 6
3 Automated Installation....................................................................................... 7
3.1 Initiating Automated Installation ................................................................. 7
3.2 Domain Server Installation Configuration file ............................................. 7
3.2.1 Winnt.sif (Domain)........................................................................... 8
3.3 Workgroup Server Installation Configuration file...................................... 24
3.3.1 Winnt.sif (Workgroup) ................................................................... 25
4 Server Policy Files............................................................................................ 43
4.1 Policy File Application.............................................................................. 43
4.1.1 Policy Application in a Domain...................................................... 43
4.1.2 Policy Application in a Workgroup................................................. 44
Table of Contents March 2004 ix