Introduction

Introduction

Welcome to the Microsoft Windows Security Resource Kit. This book provides detailed information about security features in Microsoft Windows 2000 and Microsoft Windows XP and explains how to better secure computers running these operating systems. This book also provides information on managing security and privacy on Windows-based computers.

About This Resource Kit

Although you are welcome to read the book from cover to cover, it is divided into seven parts for your convenience. Each part covers a different aspect of Windows 2000 and Windows XP security that you can read in advance of implementing security on computers running these operating systems or as a reference on the job.

The seven parts of this book are:

• Part 1, Applying Key Principles of Security, provides an overview of thinking about security on a daily basis. Part 1 also introduces some of the fundamental challenges of managing security and provides guidance on how to overcome them.
• Part 2, Securing Active Directory, provides information on the security of the Active Directory directory service from handling design issues associated with forests and domains to controlling access to objects and attributes. Part 2 has detailed information on how to secure accounts and authentication the two central components of security in Windows 2000 and Windows XP. Part 2 also describes how you can use Group Policy to increase the security of networks that use Active Directory.
• Part 3, Securing the Core Operating System, provides detailed information on how to increase the security of Windows 2000 and Windows XP. Part 3 also discusses how to better secure applications, such as Microsoft Office XP and Microsoft Internet Explorer 6.0, and mobile computers.
• Part 4, Securing Common Services, describes how to secure common services that run on Microsoft Windows 2000 Server, including Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), Windows Internet Name Service (WINS), Terminal Services, Certificate Services, Routing and Remote Access Service (RRAS), and Microsoft Internet Information Services 5.0.
• Part 5, Managing Security Updates, includes detailed information on the process of managing security updates, including service packs and hotfixes, and discusses strategies for deploying security updates. Part 5 also describes techniques for assessing the security of computers running Windows 2000 and Windows XP.
• Part 6, Planning and Performing Security Assessments and Incident Responses, provides detailed explanations of security assessments, including vulnerability scanning, IT audits, and penetration testing, and discusses how each can be used to assess the security of your network. Part 6 also provides information about how to design an incident response procedure and introduces methods for investigating security incidents.
• Part 7, Applying Key Principles of Privacy, provides administrators with an introduction to privacy and how privacy issues impact the collection and storage of both corporate and customer information. Part 7 also includes practical guidance on how administrators can increase the privacy of information.

Resource Kit Companion CD

The Microsoft Windows Security Resource Kit companion CD includes a variety of tools and scripts to help you work more efficiently when implementing and managing security on computers running Windows 2000 and Windows XP. Several of these tools are discussed in the book; however, many are not. You can find documentation for each tool in the folder in which the tool is contained. Many of these tools are from the Microsoft Windows 2000 Server Resource Kit, Supplement One, so they are designed to be implemented with Windows 2000 operating systems. Specifically, these are the tools found in the root of the Tools folder and the scripts found in the Tools/Scripts/Remote Administration Scripts folder. The companion CD also includes a fully searchable electronic version (eBook).

Resource Kit Support Policy

Microsoft does not support the tools and scripts supplied on the Microsoft Windows Security Resource Kit companion CD. Microsoft does not guarantee the performance of the tools or scripting examples, or any bug fixes for these tools and scripts. However, Microsoft Press provides a way for customers who purchase the Microsoft Windows Security Resource Kit to report any problems with the software and receive feedback for such issues. To report any issues or problems, send e-mail to [e-mail]. This e-mail address is only for issues related to the Microsoft Windows Security Resource Kit. Microsoft Press also provides corrections for books and companion CDs through the World Wide Web at: http://www.microsoft.com/mspress/support/. To connect directly to the Microsoft Press Knowledge Base and enter a query regarding a question or issue that you may have, go to: http://www.microsoft.com/mspress/support/search.asp. For issues related to the Windows OS, please refer to the support information included with your product.