Fine-Solution Security Configuration Windows 2000 Server

WIN2000 server is currently one of the more popular server operating systems, but it is not easy to configure Microsoft's operating system securely. This paper attempts to make a preliminary discussion on the security configuration of Win2000 Server.

First, customize your own WIN2000 SERVER:

1. Version of the choice: Win2000 have a variety of languages, for us, you can choose the English version or Simplified Chinese version, I strongly recommend: in the language does not become a barrier, please use English version. You know, Microsoft's products are known as Bugs & Patch, the Chinese version of the bug far more than the English version, and the patch is usually late at least half a month (that is, the general Microsoft released a loophole after your machine will be in unprotected condition for half a month)

2. Customization of components:

Win2000 installs some common components by default, but it is this default installation that is extremely dangerous (Mitnico said that he could go to any server that was installed by default, though I daren't say so, but if your host is the default installation of Win2000 server, I can tell you that You're dead.

You should know exactly what services you need and just install the services you really need, according to security principles, minimal Service + minimum privileges = maximum security.

The minimum component selection required for a typical Web server is to install only the COM Files,iis snap-in,www server component of IIS. If you do need to install additional components, be careful, especially: Indexing Service, FrontPage Server Extensions, Internet service Manager (HTML), these are some of the dangerous services.

3. Manage Application Selection:

Choosing a good remote management software is very important, not only the security requirements, but also the application needs.

WIN2000 's Terminal service is a remote control software based on RDP (Remote Desktop Protocol), which is fast, easy to operate and more suitable for routine operation.

However, Terminal service also has its shortcomings, because it uses the virtual desktop, plus Microsoft programming is not rigorous, when you use the Terminal service to install software or restart the server and the real desktop interactive operation, often will appear in distress phenomenon, For example: the use of Terminal Service to restart the Microsoft certification server (COMPAQ, IBM, etc.) may be directly off the machine.

Zebian: Bean Technology Application