Win Server 2003-person network server Security Introduction

Installation of Windows Server2003

1, the installation system requires at least two partitions, the partition format is formatted with NTFS

2. Install 2003 systems in the case of disconnected network

3, install IIS, install only the necessary IIS components (disable unwanted FTP and SMTP services, for example). By default, the IIS service is not installed, select Application Server in the Add/Remove Win component, click Details, double-click Internet Information Services (IIS), and select the following options:

Internet Information Services Manager;

Common Files;

Background Intelligent Transfer Service (BITS) server Extensions;

World Wide Web services.

If you use a FrontPage-extended Web site, check again: FrontPage 2002 Server Extensions

4, the installation of MSSQL and other software required and then update.

5. Use the MBSA (Microsoft Baseline Security Analyzer) tool provided by Microsoft to analyze your computer's secure configuration and identify missing patches and updates. Download Address: See the link at the end of the page

Ii. setting up and managing accounts

1, the system administrator account is best to build less, change the default Administrator account name (administrators) and description, the password is best to use the number of lowercase letters plus number of the upper file key combination, the length of the best not less than 14 bits.

2, create a new name for the administrator of the trap account, set the minimum permissions, and then casually enter the combination of the best not less than 20-bit password

3, disable the Guest account and change the name and description, and then enter a complex password, of course, now also has a delguest tool, perhaps you can also use it to delete the Guest account, but I did not try.

4, in the operation of the input gpedit.msc carriage return, open Group Policy Editor, select the Computer Configuration-windows Settings-security Settings-account strategy-account lockout policy, the account is set to "three landing invalid", "lock Shenyang?" 0 minutes ", the reset lock count is set to 30 minutes."

Zebian: Bean Technology Application