Chapter Summary


This chapter examines three basic parts of keeping Windows Server 2003 computers and the entire network secure:

  • Applying baseline security Every security plan must have a starting point. By making use of the preconfigured security templates supplied with Windows Server 2003, you can quickly and effortlessly implement varying levels of security within an organization at the levels that are appropriate. You can take this a step further by creating customized security templates that specifically meet your needs and security requirements. By configuring and testing security templates in the Security Configuration and Analysis snap-in, you can avoid mistakenly applying them to a large group of computers via Group Policy until you are ready to do so.

  • Performing auditing Even the best planned and implemented security solution can be circumvented. Auditing on a network can help you to detect unauthorized or abnormal network activities early, before they have a chance to become a successful attack that could have catastrophic effects on your network and your organization as a whole. Like many things, there is, however, a fine line between too much auditing and too little auditing; you need to find the perfect balance that satisfies your organizational requirements without affecting performance too adversely.

  • Keeping computers up-to-date As network administrators, you must absolutely, at all times, keep servers and network clients updated with the latest security patches and updates. In many cases, WSUS can be used to perform this task for you. In cases in which WSUS cannot be used, administrators should be judicious in their use of Windows Update or other solutions such as SMS to ensure that all clients are up-to-date and protected.

Additionally, we examined the Security Configuration Wizard, new in Windows Server 2003 Service Pack 1 and Windows Server 2003 R2. This Wizard allows you to create and implement advanced security policies that can be all encompassing and include every part of a server's configuration.

Exam Alert: SCW Revisited

You will likely not be required to demonstrate any advanced knowledge of the SCW on your 70-291 exam, but don't let that stop you from getting to know what it is and how it works.





MCSA(s)MCSE 70-291(c) Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure
MCSA/MCSE 70-291: Implementing, Managing, and Maintaining a Microsoft Windows Server 2003 Network Infrastructure (Exam Prep)
ISBN: 0789736497
EAN: 2147483647
Year: 2006
Pages: 196
Authors: Will Schmied

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net