Security Guide For Windows 2000 PRO

[micael]

This Guide together with the sources of secure W2K at Microsoft Security can be a good beginning of understanding and securing Windows 2000 to a acceptable level.

New Guide For Windows 2000 PRO
Source: SANS NewsBites, www.sans.org

The US National Institute for Standards and Technology released
a security guide for Windows 2000 Professional desktop systems in
configurations used by office workers, at home users, or road-warriors.
NIST is inviting comments and suggestions on the guide.
The guide can be found here.

[{P²P}Apocalypse]

As well. Burried deep in the MS site is a free MS security kit on CD. They will actualy mail it to you for free. It has some tools and utilities availible on it to harden your system.

I found it! Here is the link: http://www.microsoft.com/security/kitinfo.asp

It has a few nice toys on it and it's actualy free. I know I just repeated myself. But Microsoft and free just don't seem to go togather. LOL

[gold eagle]

good post micael.

btw where is the Aalaan islands anyway?

I can't find it on the map.

[SarinMage]

DAMN!!! it is free, i just ordered it...... thought id take advantage of microsofts "freeness" while it lasts

[micael]

Thank's for asking its out of topic.. But I'm proud of our small island

Originally posted by gold eagle
where is the Aalaan islands anyway?
I can't find it on the map.

The Aaland Islands are a small group of islands between Sweden and Finland, you can find some info and a map here and some other useless info here

[Pooh-Bear]

*cough* would one need to enclose one´s serialnumber when getting the cd?

[s0nIc]

Wow.. so far this is one of the RARE and USEFUL post i havent and always wanted to read for a long time.. Very and i mean VERY informative..

[zigar]

It has some tools and utilities availible on it to harden your system.

Just be aware that in the NSA guide to securing windows 2000, they say that m$ doesn't know squat about security and their recommended guidelines for securing servers and workstations suck...(well i paraphrased a bit... )

if you haven't checked it out

http://nsa2.www.conxion.com/

There's also some guides to securing cisco routers and email (think this is a link to just three words "Don't use outlook"

You can also get some .inf policies for quick application to your security policy...(if you compare these policies with the policies that m$ supplies, you'll see what i mean above...)

[VictorKaum]

You can order The Security Tool Kit CD at no charge for US customers. It includes automation scripts to quickly install all the security hotfixes recommended in the kit.

"no charge for US customers"
I'am disappointed, I cannot get it for free...
but there's an online version of this thing too.

[gold eagle]

VictorKaum, try and see if you can get it through channels. By this I mean if your firm or vendors have US affiliates, they can send you a US copy. No sense paying for something that is free.