Windows Server IP Security Policy

Requirements: A company Windows Server involves some of the company's important projects. So you need to allow only the designated public network IP to login! This is achieved through the IP Security policy of Windows.

Note: First release yourself, then go to deny others to connect

Operating system: Windows Server 2003

1.

Locate "Start", "Administrative Tools", "Local Security Policy"

(1) Creating an IP Security Policy

Right-click on the right side of the space to create an IP installation policy

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M02/83/BB/wKiom1d7Vd-QrI1GAAAs9wylme4942.png-wh_500x0-wm_3 -wmp_4-s_4068475127.png "title=" qq picture 20160705143734.png "alt=" Wkiom1d7vd-qri1gaaas9wylme4942.png-wh_50 "/>

Click "Next"

IP Security Policy Wizard: Naming (3389 filtering)

Click "Next"

Activates the checkmark for the default response rule.

Click "Next"

Edit the checkmark of the attribute to remove

Click "Finish"

(2) Add IP filter List

Double-click the 3389 that you just created to filter that policy

Named to allow 3389 connections

Select the IP filter list, select Edit, and then select Add

650) this.width=650; "Src=" Http://s4.51cto.com/wyfs02/M00/83/BC/wKiom1d7V97TRC13AAA3Nie9ehc477.png-wh_500x0-wm_3 -wmp_4-s_2857942628.png "title=" qq picture 20160705144627.png "alt=" Wkiom1d7v97trc13aaa3nie9ehc477.png-wh_50 "/>

Click "Next"

Remove the mirror from the hook.

Source Address Select a specified IP (your native IP)

Destination Address Select any IP

Protocol Selection TCP Protocol

Port selection 3389

(3) Creating an IP filter action

Create an IP filter action after the IP filter list is selected

650) this.width=650; "Src=" Http://s3.51cto.com/wyfs02/M00/83/BC/wKiom1d7WRvzx2QxAABPFVFiXbk699.png-wh_500x0-wm_3 -wmp_4-s_2463157889.png "title=" qq picture 20160705145150.png "alt=" Wkiom1d7wrvzx2qxaabpfvfixbk699.png-wh_50 "/>

Click "General" after adding to name the IP filter action (allow).

Security measures: Select "License" (allow or block critical security measures in this case)

Conversely if the required IP is blocked

Security measures: Blocking

Similarly: Create IP filter Lists to add a number of allowed or blocked IP addresses

After the creation is complete above

Assign the IP security policy that you created. This IP security policy is working!

650) this.width=650; "Src=" Http://s5.51cto.com/wyfs02/M01/83/BC/wKioL1d7WmPz3Q6pAAAYnSzmxkA021.png-wh_500x0-wm_3 -wmp_4-s_615450973.png "title=" qq picture 20160705145650.png "alt=" Wkiol1d7wmpz3q6paaaynszmxka021.png-wh_50 "/>

This article from "The Dark before Dawn" blog, declined reprint!

Windows Server IP Security Policy