Windows Server 2003 Recommended Baseline Security

More documents

Recommendations

Info

Windows Server 2003 Recommended Baseline Security (ITSG-20) 4.2 Baseline Server Policy Files Details ........................................................ 45 4.3 Account Policies ...................................................................................... 45 4.3.1 Password Policy............................................................................ 45 4.3.2 Account Lockout Policy ................................................................. 46 4.3.3 Kerberos Policy ............................................................................. 47 4.4 Local Policies........................................................................................... 48 4.4.1 Audit Policy ................................................................................... 48 4.4.2 User Rights Assignments.............................................................. 49 4.4.3 Security Options............................................................................ 56 4.5 Event Log................................................................................................. 69 4.5.1 Log Size ........................................................................................ 69 4.5.2 Guest Access................................................................................ 70 4.5.3 Retention Method.......................................................................... 70 4.6 System Services ...................................................................................... 70 4.6.1 Services Explicitly Covered by Microsoft Guidance ...................... 71 4.6.2 Services Not Explicitly Covered by Microsoft Guidance................ 97 4.7 Additional Security Settings ..................................................................... 98 4.7.1 Security Consideration for Network Attacks .................................. 98 4.7.2 AFD.SYS Settings....................................................................... 100 4.7.3 Other Security Related Settings.................................................. 101 4.7.4 Manual Activities ......................................................................... 102 4.7.5 Access Controls .......................................................................... 105 4.7.6 Variance from Microsoft Guidance.............................................. 111 5 Role Based Server Policies ........................................................................... 117 5.1 Role Based IPSec Policies .................................................................... 117 5.1.1 Load IPSec policy ....................................................................... 117 5.1.2 Activate IPSec Policy .................................................................. 117 5.2 Domain File Server Security Policy........................................................ 118 5.2.1 Variance from Microsoft “Hardening File Servers” Guidance ...... 118 5.2.2 [Service General Setting] ............................................................ 119 5.2.3 Domain File Server IPSec Policy ................................................ 119 5.3 Domain Print Server Policy .................................................................... 121 5.3.1 Variance from Microsoft “Hardening Print Servers” Guidance .... 121 5.3.2 [Registry Values] ......................................................................... 121 5.3.3 [Service General Setting] ............................................................ 122 5.3.4 Domain Print Server IPSec Policy............................................... 122 5.4 Workgroup File Server Policy ................................................................ 124 5.4.1 Variance from Microsoft Guidance.............................................. 124 5.4.2 [Registry Values] ......................................................................... 124 5.4.3 [Service General Setting] ............................................................ 124 5.4.4 Workgroup File Server IPSec Policy ........................................... 125 5.5 Workgroup Print Server Policy............................................................... 126 5.5.1 Variance from Microsoft Guidance.............................................. 126 5.5.2 [Registry Values] ......................................................................... 127 5.5.3 [Service General Setting] ............................................................ 127 5.5.4 Workgroup Print Server IPSec Policy.......................................... 127 x March 2004 Table of Contents
Windows Server 2003 Recommended Baseline Security (ITSG-20) 6 Server Policy Compliance: Inspection and Enforcement ........................... 131 6.1 Configuration of Microsoft Management Console (MMC) ...................... 131 6.2 Load Policy File and Computer Configuration........................................ 131 6.3 Compare Resultant Policy and Computer Settings................................ 132 Bibliography .............................................................................................................. 133 Annex A...................................................................................................................... 135 Table of Contents March 2004 xi
Page 1 and 2: IT Security Guidance Windows Server
Page 3 and 4: Windows Server 2003 Recommended Bas
Page 11: Windows Server 2003 Recommended Bas
Page 15: Windows Server 2003 Recommended Bas
Page 28 and 29: Unclassified ITSG for Windows Serve
Page 62 and 63:
Unclassified ITSG for Windows Serve
Page 64 and 65:
Page 66 and 67:
Page 68 and 69:
Page 70 and 71:
Page 72 and 73:
Page 74 and 75:
Page 76 and 77:
Page 78 and 79:
Page 80 and 81:
Page 82 and 83:
Page 84 and 85:
Page 86 and 87:
Page 88 and 89:
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 98 and 99:
Page 100 and 101:
Page 102 and 103:
Page 104 and 105:
Page 106 and 107:
Page 108 and 109:
Page 110 and 111:
Page 112 and 113:
Page 114 and 115:
Page 116 and 117:
Page 118 and 119:
Page 120 and 121:
Page 122 and 123:
Page 124 and 125:
Page 126 and 127:
Page 128 and 129:
Page 130 and 131:
Page 132 and 133:
Page 134 and 135:
Page 136 and 137:
Page 138 and 139:
Page 140 and 141:
Page 142 and 143:
Page 144 and 145:
Page 146 and 147:
Page 148 and 149:
Page 150 and 151:
Page 152 and 153:
Page 154 and 155:
Page 156 and 157:
Page 158 and 159:
Page 160 and 161:
Page 162 and 163:
Page 164 and 165:
Page 166 and 167:
Page 168 and 169:
Page 170 and 171:
Page 172 and 173:
Page 174 and 175:
Page 176 and 177:
Page 178 and 179:
Page 180 and 181:
Page 182 and 183:
Page 184 and 185:
Page 186 and 187:
Page 188 and 189:
Page 190 and 191:
Page 192 and 193:
Page 194 and 195:
Page 196 and 197:
Page 198 and 199:
Page 200 and 201:
Page 202 and 203:
show all

Windows Server 2003 Recommended Baseline Security

Create successful ePaper yourself

Delete template?

Save as template?