Windows Server 2003 Recommended Baseline Security

Unclassified ITSG for Windows Server 2003
e. Click ‘Open’ button.
i. ‘Import Template’ window opens.
f. Browse to the location of the Baseline configuration file and select it.
g. Select ‘Clean this database before importing’.
h. Click ‘Open’ button.
i. Right click on ‘Security Configuration and Analysis’.
j. Click ‘Import Template’.
i. ‘Import Template’ window opens.
k. Browse to the location of the role based policy file and select it.
l. Click ‘Open’ button.
m. Right click ‘Security Configuration and Analysis’.
n. Select ‘Analyze Computer Now’.
i. ‘Perform Analysis’ window opens.
o. Click ‘OK’ to accept the log file location and perform analysis.
6.3 Compare Resultant Policy and Computer Settings
a. Click on the ‘+’ to expand ‘Security Configuration and Analysis’.
b. Click on the ‘+’ to expand ‘Account Policies’.
c. Click on ‘Password Policies’ (right side frame shows settings).
NOTE: If any item in the database does not match the computer setting, a small
red ‘x’ in the ‘Policy’ column appears.
d. Repeat the process for all sub-groups in ‘Account Policies’, ‘Local Policies’, and
‘Event Logs’.
e. Click on ‘System Services’ (right frame shows service settings).
NOTE: If any item in the database does not match the computer setting, a small
red ‘x’ in the ‘System Service’ column appears. Additionally, if the security
setting does not match, the ‘Permission’ column will display ‘Investigate’.
f. To reset the configuration, simply reapply the policy. A domain server can be
rebooted to force application of the policy.
g. Policy configuration for a workgroup server must be reapplied manually. Please
follow the procedure outlined in 5.1 Role Based IPSec Policies.
132 March 2004 Compliance Inspection and Enforcement