How to create secure Windows Server 2008

[Elijah2010]

Hi all,

At present, many enterprises will be Microsoft's Windows platform as their platform of choice.As companies who use Windows platform to run business-critical applications, the increasing reliance on, Windows platform, security, availability, the importance of also self-evident. After all, in the current increasingly competitive conditions, system crashes to the business impact can be catastrophic, so how to effectively manage the Windows Server 2008 into the enterprise IT departments a very urgent matter. Please suggest. Thanks in advance.

To create a powerful and secure server must be installed from the beginning, when attention to every detail of the security. The new server should be installed in an isolated network, to stamp out all possible channels of attack, until the completion of the operating system's defenses. At the beginning of the first installation of a number of steps, you will be asked in the FAT (File Allocation Table) and NTFS (New Technology File System) to choose between. At this time, you are sure to select all of the disk drive NTFS. FAT is the operating system designed for early comparison of the original file system. NTFS is Windows NT with the emergence of emergence, it can provide a FAT does not have security features, including access control lists (Access Control Lists, ACL) and file system log, the file system logging For the file system changed. Next, you need to install the latest Service Pack (SP2) and any available hot fixes. Although many of the Service Pack patch quite old, but they can fix a number of known vulnerabilities that can pose a threat, such as denial of service attacks, remote code execution and cross-site scripting. All the best

[SalVatore]

After installing the system, you can sit down and do some of the more detailed safety work. Windows Server 2003 to improve immunity far the most simple way is to use the Server Configuration Wizard (Server Configuration Wizard, SCW), which can guide you on the server, the network's role to create a security strategy. SCW and Configuration Services Wizard (Configure Your Server Wizard) are different. SCW does not install the server components, but the monitoring of ports and services, and configure the registration and audit settings. SCW is not installed by default, so you must pass the Control Panel Add / Remove Programs window to add it. Select "Add / Remove Windows Components" button and select the "Security Configuration Wizard", the installation process will automatically begin. Once installed, SCW can be from a "management tool" to access. Check and reply.

[jesse]

From your server, press the power button on that moment, until the operation starts and all services are active until the threat of malicious behavior of the system still have the opportunity to damage the system. In addition to the operating system OS, a health started when the server should have a password-protected BIOS / firmware. In addition, the BIOS is concerned, the server's boot sequence should be properly set to prevent other media from unauthorized start. After you start your computer, immediately press the F2 key, so you enter into the BIOS settings page. You can use the Alt-P in various settings in the BIOS, move back and forth on the label. In the boot sequence (Boot Order) tab page, set the server to start the first option for the internal hard drive (Internal HDD). In the system security (Boot Order) tab, the hard drive password There are three options to choose from: Primary, Administrative, and Hard. All the best.

[Lillebror]

During the installation process, three local user accounts are automatically created Administrator, guest , Remote Assistance Account (Help-Assistant, along with the Remote Assistance session is installed). Administrator account has the highest privileges to access the system. It can specify the user permissions and access control. Although the master account can not be deleted, but you should disable or to re-name it to avoid being easily stolen by hackers and intrusion on the system. The correct approach is that you should be for a user or a group of objects to assign administrator privileges. This makes it more difficult to judge whether a hacker which users have administrator privileges. This audit process is also essential. Imagine if everyone in an IT department can use the same administrator account and password to log in and access the server, this is what a major security risk ah. Best not to use an administrator account.

[Calvin K]

You spend a lot of time and energy to strengthen your Windows Server 2003 server, you have to do the last step is to create a 0/full level of machines and system state backup. We must carry out a baseline backup of the system on a regular basis, so that when a security incident, you will be able to conduct the baseline backup of the server to resume. Can be said that the baseline backup is the server's "resurrection pills." In the main Windows Server 2003 server software and operating system upgrade, be sure to back up the system baseline. All the best.