Re: Security Template vs SCW

If you are working from the new version of the Windows 2003
Security guidance, you should notice that use of SCW is intended
and advised. If you do not, but only make use of the templates,
then there will be no configuration of the services, as this has been
intentionally left to SCW by the newer guide.

So, now what is your question ??

"Neil" <neil.christopher@xxxxxxx> wrote in message
news:%23CU9p$p$GHA.3316@xxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have used mostly security templates provided by MS to harden my member
servers and domain controllers. I have only used the memberserver baseline
security to harden domain controllers and other servers and have not used
specific templates to harden it. Want to be careful in doing this, so
require some advice.

Also, we have FS, DHCP and other services in a cluster server. Some of the
remote sites are using domain controllers itself as a file server, print
server, dhcp server etc... So, what would be your thought on tightening
security on these type of servers.

I have worked on SCW and I know that I could find tune more to secure it
according to my requirements but currently using the template itself
provided so that I could atleast have something in place.

thanks in advance



.

Relevant Pages

  • Re: W2000 security
    ... claimed SCW did not deliver but then made reference to IE, ... BUT they forgot the WHOLE of their o/s was badly designed and the WHOLE of ... IE is badly designed in the context of security, ... "Windows Media Player" that can't be uninstalled on a PRODUCTION SERVER ...
    (microsoft.public.security)
  • Re: Security Configuration Editor versus Wizard for 2003 policy
    ... I have not used it much myself but SCW so far seems impressive in that it is ... tailored to server role and can implement ipsec filtering policy to also ... The general .inf security templates are ... not tailored to a server role. ...
    (microsoft.public.windows.server.security)
  • Re: SCW with Terminal Services Custom Port
    ... I take it from your post that it is not possible to keep the port change ... > Microsoft MVP - Terminal Server ... >> In my attempts to apply SP1 and then configure the security of our ... >> SCW is not compatible with customizing the RDP port on the server. ...
    (microsoft.public.windows.terminal_services)
  • SCW with Terminal Services Custom Port
    ... In my attempts to apply SP1 and then configure the security of our Terminal ... SCW is not compatible with customizing the RDP port on the server. ... SCW, it seems like the server only accepts RDP connections using 3389. ...
    (microsoft.public.windows.terminal_services)
  • Re: Setup failed registering ISA Server Performance monitoring
    ... You might have to re-apply the "Default Security" template to your server ... Predefined security templates: ... If you want to harden your ISA installation do not apply security ... Hardening the Windows Infrastructure on the ISA Server 2004 Computer: ...
    (microsoft.public.isa)