Windows
2003 includes a host of security features that dramatically improves
the Windows security posture. However, these new features add
a level of complexity that needs to be well understood by those
responsible for evaluating its effectiveness. This seminar will
outline the steps necessary to ensure that Windows 2003 servers
are configured securely. The seminar will address general principles
and concepts, as well as the detailed technical implementations
and configuration settings related to securing and controlling
a Microsoft server. The seminar will also provide “how to”
instruction on accessing the control-related settings, .les, and
other information required to perform an effective risk assessment.
Security tools provides provided with W2K3, including the Security
Configuration and Analysis MMC tool, Group Policy Management Console,
and Security Configuration Wizard, will be discussed in detail.
Course Outline:
Service Minimization
Vulnerability and Patch Management
Security Policies
Security Options
Introduction to Windows Access Controls and
Groups
Access Controls for Files and Folders
Access Controls for Shares, Registry Keys,
and Services