Introduction to Windows Server 2003 Security Features

Overview of enhanced security features

• Key security technologies
• Identifying attack categories
• Penetration testing of default systems
• Sources of security guidance

Configuring security settings

• Leveraging pre-defined security templates
• Deploying security via Group Policy
• Constructing custom security policies
• Applying local policies with the Security Configuration and Analysis tool
• Importing and exporting custom templates

Leveraging Fundamental Security Management Tools

Building a Public Key Infrastructure

• Implementing a PKI with Microsoft Certificate Services
• Requesting, managing and revoking X.509v3 certificates
• Publishing a Certificate Revocation List
• Backing up digital certificates and private keys

Implementing effective role-based server security

• Designing a scalable baseline security policy
• Customising role-based security using the Security Configuration Wizard
• Converting role-based XML templates to group policies

Creating custom security policies

• Translating organisational policies into effective security settings
• Designing, analysing and applying custom security templates

Efficiently using security deployment tools

• Security configuration and analysis
• Group Policy Editor
• Resultant Set of Policies wizard
• Cracking passwords using third-party utilities

Deploying a Scalable Security Model to Key Components

Extending authentication security

• Installing and configuring smart cards and tokens
• Implementing certificate-based authentication policies

Locking down access to data

• Securing access to resources with NTFS permissions
• Determining resultant access with the Effective Permissions tool
• Pinpointing NTFS vulnerabilities with hacker tools

Deploying the Encrypting File System

• Configuring EFS for real-world implementation
• Integrating digital certificates with EFS
• Creating recovery agent policies to assure data access

Protecting sensitive data on networks

• Sniffing networks to detect common vulnerabilities
• Configuring IPsec to provide confidentiality and integrity services
• Strengthening IPsec authentication security with digital certificates

Controlling Software Execution

Applying software restriction policies

• Preventing execution of unauthorised scripts and other code
• Implementing disallow policies for applications

Managing critical system services

• Disabling unnecessary services
• Controlling service startup with Group Policies

Employing Best Practices to Secure the Active Directory

Auditing to detect intrusions

• Enabling and configuring auditing
• Dissecting audit logs
• Auditing network traffic with protocol analysers
• Recognising evidence of intrusion attempts

Employing patch management to close vulnerabilities

• Managing the testing and deployment of security updates and hotfixes
• Administering WSUS, MBSA and Windows Update with Group Policy