Microsoft Windows Server 2003 Security Guide

Acknowledgements......Page 3 Table of Contents......Page 5 Overview......Page 9 Executive Summary......Page 10 Who Should Read This Guide......Page 11 Get Secure Stay Secure......Page 12 Scope of this Guide......Page 13 Content Overview......Page 14 Skills and Readiness......Page 18 Requirements......Page 19 Style Conventions......Page 20 Summary......Page 21 Overview......Page 23 Domain Policy......Page 39 Account Policies......Page 40 Password Policy......Page 41 Account Lockout Policy......Page 46 Kerberos Policy......Page 49 Security Options......Page 50 Summary......Page 52 Overview......Page 55 Windows Server 2003 Baseline Policy......Page 59 Audit Policy......Page 60 User Rights Assignments......Page 72 Security Options......Page 84 Event Log......Page 108 System Services......Page 111 Additional Registry Settings......Page 147 Additional Security Settings......Page 152 Summary......Page 157 Overview......Page 159 Audit Policy Settings......Page 161 User Rights Assignments......Page 162 Security Options......Page 167 Event Log Settings......Page 168 System Services......Page 169 Additional Security Settings......Page 172 Summary......Page 182 Overview......Page 185 Audit Policy Settings......Page 186 User Rights Assignments......Page 187 Security Options......Page 188 Event Log Settings......Page 189 System Services......Page 190 Additional Security Settings......Page 191 Summary......Page 197 Overview......Page 199 Audit Policy Settings......Page 200 User Rights Assignments......Page 201 Security Options......Page 202 Event Log Settings......Page 203 System Services......Page 204 Additional Security Settings......Page 206 Summary......Page 209 Overview......Page 211 Audit Policy Settings......Page 212 User Rights Assignments......Page 213 Security Options......Page 214 Event Log Settings......Page 215 System Services......Page 216 Additional Security Settings......Page 217 Summary......Page 220 Overview......Page 221 Audit Policy Settings......Page 222 User Rights Assignments......Page 223 Security Options......Page 224 Event Log Settings......Page 225 System Services......Page 226 Additional Security Settings......Page 228 Summary......Page 244 Overview......Page 245 Audit Policy......Page 246 User Rights Assignments......Page 247 Security Options......Page 248 Event Log......Page 249 System Services......Page 250 Additional Security Settings......Page 251 Summary......Page 252 Overview......Page 253 Audit Policy Settings......Page 255 User Rights Assignments......Page 256 Security Options......Page 257 Event Log Settings......Page 260 System Services......Page 261 Additional Registry Settings......Page 263 Additional Security Settings......Page 264 Summary......Page 267 Overview......Page 269 Audit Policy Settings......Page 271 User Rights Assignments......Page 272 Security Options......Page 274 Event Log Settings......Page 275 System Services......Page 276 Additional Security Settings......Page 284 Summary......Page 288 Conclusion......Page 289 Acknowledgements 3 Table of Contents 5 Introduction to the Windows Server 2003 Security Guide 9 Overview 9 Executive Summary 10 Who Should Read This Guide 11 Get Secure Stay Secure 12 Scope of this Guide 13 Content Overview 14 Skills and Readiness 18 Requirements 19 Style Conventions 20 Summary 21 Configuring the Domain Infrastructure 23 Overview 23 Domain Policy 39 Account Policies 40 Password Policy 41 Account Lockout Policy 46 Kerberos Policy 49 Security Options 50 Summary 52 Creating a Member Server Baseline 55 Overview 55 Windows Server 2003 Baseline Policy 59 Audit Policy 60 User Rights Assignments 72 Security Options 84 Event Log 108 System Services 111 Additional Registry Settings 147 Additional Security Settings 152 Summary 157 Hardening Domain Controllers 159 Overview 159 Audit Policy Settings 161 User Rights Assignments 162 Security Options 167 Event Log Settings 168 System Services 169 Additional Security Settings 172 Summary 182 Hardening Infrastructure Servers 185 Overview 185 Audit Policy Settings 186 User Rights Assignments 187 Security Options 188 Event Log Settings 189 System Services 190 Additional Security Settings 191 Summary 197 Hardening File Servers 199 Overview 199 Audit Policy Settings 200 User Rights Assignments 201 Security Options 202 Event Log Settings 203 System Services 204 Additional Security Settings 206 Summary 209 Hardening Print Servers 211 Overview 211 Audit Policy Settings 212 User Rights Assignments 213 Security Options 214 Event Log Settings 215 System Services 216 Additional Security Settings 217 Summary 220 Hardening IIS Servers 221 Overview 221 Audit Policy Settings 222 User Rights Assignments 223 Security Options 224 Event Log Settings 225 System Services 226 Additional Security Settings 228 Summary 244 Hardening IAS Servers 245 Overview 245 Audit Policy 246 User Rights Assignments 247 Security Options 248 Event Log 249 System Services 250 Additional Security Settings 251 Summary 252 Hardening Certificate Services Servers 253 Overview 253 Audit Policy Settings 255 User Rights Assignments 256 Security Options 257 Event Log Settings 260 System Services 261 Additional Registry Settings 263 Additional Security Settings 264 Summary 267 Hardening Bastion Hosts 269 Overview 269 Audit Policy Settings 271 User Rights Assignments 272 Security Options 274 Event Log Settings 275 System Services 276 Additional Security Settings 284 Summary 288 Conclusion 289