Re: XP Hardening

From: Eric (ews@tellurian.net)
Date: 09/20/02 

Date: Thu, 19 Sep 2002 17:02:55 -0500
To: "Greene Paul" <greene_paul@bah.com>, focus-ms@securityfocus.com
From: Eric <ews@tellurian.net>

Registry settings can be quite different between XP and Win2K.

I don't think the cisecurity or nsa docs have enough unique information to
make them any better than the compilation of documents created over the
years. In some areas, each of the docs are just plain wrong.

A stellar book on security hardening guidelines for NT4, Win2K, XP, IIS,
SQL, and Exchange is in process and should be out by in December or shortly
thereafter:

http://www.amazon.com/exec/obidos/tg/detail/-/0735618682/qid=1032472895/sr=1-10/ref=sr_1_10/002-9870625-3449624?v=glance&s=books

At 04:01 PM 9/19/2002 -0400, Greene Paul wrote:
>There's good hardening guides at the following three sites. These guides
>are geared towards Windows 2000, but the registry settings for XP are
>extremely similiar.
>
>www.cisecurity.org
>http://www-08.nist.gov/itsec/NIST_Win2kPro_Draft.pdf
>http://nsa1.www.conxion.com/
>
>ohnonono@hushmail.com wrote:
>
>>-----BEGIN PGP SIGNED MESSAGE-----
>>Hash: SHA1
>>
>>Hi,
>>
>>Does anyone have a list (whitepaper, .pdf, website, etc) of services that
>>can be shut off from a default install of xp to harden it? Also does
>>anyone have any other documentation on registry tweaks to harden it?
>>
>>Thx
>>-----BEGIN PGP SIGNATURE-----
>>Version: Hush 2.1
>>Note: This signature can be verified at https://www.hushtools.com
>>
>>wl0EARECAB0FAj2JxoQWHG9obm9ub25vQGh1c2htYWlsLmNvbQAKCRAuXN+1lPsfqZxh
>>AJ9Nsgk5KlGvMCaq0uVfYqmp5DsDsgCfa7EpPfs54l7BNzBsRrT8xb7O+Fg=
>>=5m+e
>>-----END PGP SIGNATURE-----
>>
>>
>>
>>
>>Get your free encrypted email at https://www.hushmail.com
>>
>>
>