Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows Server 2003Windows 2000Windows NTSmall Business ServerVirtual ServerExchange ServerIISHost Integration ServerISA ServerSMSWSUSMOMWindows Media ServerSecurityCertification
Related Topics
SQL ServerMS WindowsMS OfficePC HardwareMore Topics ...

Windows Server Forum / Windows Server 2003 / Security / July 2007

Tip: Looking for answers? Try searching our database.

using security templates to harden servers

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
duc_arioch@hotmail.com - 24 Jul 2007 10:25 GMT
Hi all,

I want to increase the security of my windows 2003 servers.
I read some documents from Microsoft.
I'm still confuse about the difference between the original templates
(securews, hisecurews...) and the one supplied
with the Windows Server 2003 Security Guide (EC-Member Server
Baseline, LC-Member Server Baseline...).
Which set do you recommend me to use ?

Thanks for your lights.

 Arioch
Roger Abell [MVP] - 25 Jul 2007 05:26 GMT
The guides are far, far more appropriate - however . . .

I would recommend that you use none of those you
have mentioned.  The first mentioned (securews, ...)
are very old and outdated.  The templates provided
as part of the Security Guide are intended to be used
as examples, as starting points, from which you are to
derive what is appropriate for the specifics of your
machines.

None of these, the first or second mentioned were ever
intended to be used, as is, by just pointing at them and
applying !!

Read the Windows 2003 Security Guide and the companion
Hardening Guide.  Decide what settings address risks that
you face.  You likely would end up with a self-defined
template (and sceregvl.inf) that combines settings from
multiple of the templates.  Use the Security Configuration
and Analysis MMC snap-in to analyze systems first to see
what differs, what use of your template will change.
Possible make copies of your template (copy/paste) which
you edit (notepad or Security Templates MMC snapin) so
that each only applies a part of the settings, which would
allow you to try your selected settings part by part (this
makes it more simple to find which setting is at issue if
you encounter an unexpected complication).

Roger

> Hi all,
>
[quoted text clipped - 9 lines]
>
>  Arioch
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2010 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.