Chapter 7. Windows Security and Patch Management

Entire books are devoted to Windows securityhow to secure Windows clients, servers, headless machines, terminals, web servers, and more. In this chapter, however, I've chosen to highlight some of the useful tools for managing and for automating security on Windows Server 2003. I've also included some references to security policy settings that most organizations will find helpful.

In the interest of full disclosure, I must say I have not included an exhaustive reference to every security setting to be found in Windows. So many options are unique to different environments that I've found the best procedure is to give a broad overview of security policy management tools, along with some general settings that can increase security greatly, and then let you explore Windows' security features yourself. For a more in-depth treatment of Windows security, see Securing Windows Server 2003 (O'Reilly).