Summary

---

In this chapter, you learned how to define baseline security templates for different roles. You learned how to use the predefined security templates in different environments and which ones are more appropriate for different types of servers.

Next we showed you what types of customizations you would make for the various servers: domain controllers, infrastructure servers, and other application roles such as database and mail servers.

You learned what modifications you should make to the templates using Group Policy as well as how to compare the current settings with those defined in a template using the Security Configuration And Analysis snap-in.

Finally, you learned the different exploits that can plague your DNS infrastructure and the steps that you can take to minimize or prevent the servers from being targeted for attack.

---