Summary of Exam Objectives

When Windows Server 2003 is installed on a machine, additional configuration is needed to ensure it provides the necessary functionality and is secure. Windows Server 2003 can be configured to perform up to 11 different roles. Each role provides additional tools, services, and features that can be used to enhance your network and (in a number of cases) improve security.

Part of creating a secure environment involves choosing the right operating system. In this chapter, we compared the minimum requirements for various versions of Windows. We also saw that Windows Server 2003 offers a number of new features that were not available in previous versions, while still providing backward-compatibility to older systems. By using features like Kerberos authentication, functional levels, smart card support, and the ability to create domain controllers from backups, you can create secure environments and perform tasks more easily.

You can configure server roles using security templates, applying specific settings to a machine to make it more secure. These templates can be applied to member servers, workstations, and domain controllers, by using Local Security Policy or GPOs in AD. Because not all templates will contain the settings you want for your domain, you can modify them using the Security Configuration and Analysis tool or Security Template tool. Then you can use the Security Configuration and Analysis tool or the Secedit command-line utility to configure the server with the settings stored in the template.

In addition to customizing templates, you can perform other steps to provide security to your systems. These include implementing physical security, using antivirus programs, using NTFS on hard disks, using strong passwords, and other initiatives related to the role a server plays on the network. By using these methods, you can help protect the systems in a domain and forest from various threats.