Hardering_Windows2k(2).pdf

(607 KB) Pobierz
Hardening Windows 2000
Philip Cox
Phil.Cox@SystemExperts.com
4 Steps to Practical Win2K Security
Locate Windows system
Insert *nix CD
Reboot
Follow installation prompts
☺
But if that is not an option …
V 1.0 Copyright SystemExperts 2001,2002,2003
Hardening Win2K
Out of the box
Physical Security
OS Install
System Tighten
Testing
The goal: one service, one system
The reality is though that many people will not heed this
advice, and will run systems that support multiple functions,
because either they do not see the problem with it, or they
have financial constraints that prohibit them from doing it the
right way
V 1.0 Copyright SystemExperts 2001,2002,2003
Win2K Out of the Box
Syskey
Authentication
Kerberos for Domain authentication
NTLM for local and backward compatable
Authorization
Fair File system permissions
Auditing
None, unless set by Group Policy
V 1.0 Copyright SystemExperts 2001,2002,2003
Win2K Server Out of the Box
Services
CIFS/SMB with NetBIOS
IIS : WWW, Front page extensions, & SMTP
Index server
V 1.0 Copyright SystemExperts 2001,2002,2003
Zgłoś jeśli naruszono regulamin