“The definitive tool to learn what’s proper for Microsoft Windows systems. Roberta’s excellent guidance will easily help you build secure, resiliant systems.” --Steve Riley, Security Business and Technology Unit, Windows Division, Microsoft Corporation Take a proactive approach to network security by hardening your Windows systems against attacks before they occur. Written by security evangelist Roberta Bragg, this hands-on resource provides concrete steps you can take immediately as well as ongoing actions to ensure long-term security. Whether you have one Windows server or one hundred, you’ll get complete details on how to systematically harden your network from the ground up, as well as strategies for getting company-wide support for your security plan. With coverage of Windows 95/98/NT 4.0/2000/XP and Windows Server 2003, this book is an essential security tool for on-the-job IT professionals. Features a four-part hardening methodology: <ul>
<li>Do This Now!--Checklist of immediate steps to take to lockdown your system from further attack </li>
<li>Take It From The Top--Systematic approach to hardening your enterprise from the top down, focusing on authentication, access controls, borders, logical security boundaries, communications, storage, and administrative authority </li>
<li>Once Is Never Enough!--Ongoing monitoring and assessment plan to keep your network secure, including patch management and auditing </li>
<li>How to Succeed At Hardening Your Windows Systems--Strategies for getting budget approval, management buy-in, and employee cooperation for your security program </li>
</ul>
Roberta Bragg, CISSP, MCSE: Security, Security+, co-author of Network Security: The Complete Reference, instructor, and consultant, focuses on how to proactively deploy proven security principles to defend Windows systems from possible attack. Roberta is the Security Advisor columnist for MCP magazine, the Security Expert for searchWin2000.com, and

Hardening Windows Systems

Computers & Technology

Bragg, Roberta

Networking & Cloud Computing

McGraw-Hill/Osborne Media

Preface Preface Writing a technical book and getting it published are not particularly difficult projects. The primary requirements are dogged determination and persistence. Writing a technical book that people can use, a book that they keep on their shelf as a reference, a book that becomes the standard in its class-that s quite a bit harder. To do that, you not only have to know the subject matter and be able to present it in a reasonably interesting manner, but you also have to include the information that people need to know and provide the analysis that experience provides. In addition, the technology must be presented in a way that is digestible by the average person responsible for implementing it. Accuracy, of course, must be ensured. Doing all of these things is not easy. It is, however, what I set out to do. Should You Buy This Book? My ego and my pocketbook say yes. My conscience, however, tells me that this book is not one that every techie will need. Here are some guidelines: This book is not designed with the Windows end user, advanced or not, in mind. It is meant for the server administrator, network administrator, security administrator, IT manager, technology specialist, or other individual who must design, implement, troubleshoot, or configure the security of Windows Server 2003 or the networks it is used on. Although it does provide the details that may help anyone studying for an exam, it is not a resource for those whose only interest is passing an exam. There are no study questions and way too much information on topics that may not be on an exam but that are vital to the understanding and operation of server and network security. This book does provide important information and the details of securing Windows Server 2003; however, it is not a step-by-step guide on how to harden the server. Instead, it is a technical resource, and it provides much of the rationale behind hardening steps. If you do not use Windows and don t believe it has a place in your network, why are you reading this? I do believe that if you read this book, you may find that Windows Server 2003 does have a place in your network. However, I must warn you-you need to consider the next statement. If you have no experience or knowledge of Windows, you will need a companion book that concentrates on the technology, a server you can explore on your own, or a willingness to research basic Windows and basic Windows networking on your own. Before you begin studying the more advanced topics, such as securing Active Directory or utilizing Windows Server 2003 resources to provide network security, you will need some understanding of Active Directory. This book assumes that you are not new to Active Directory. If you are an expert on Windows Server 2003 security, you may learn something new here. If you are, like most technical Windows users, solidly savvy in some security areas but lacking information in others, I believe you ll be able to find the information you need to become well rounded within these pages. If you are a programmer, this book can do much to help you understand how Windows server security works and how its security technologies are used on a network. It should not, however, be your source for the intimate details you need if you must program security or program securely. The technical details you need are primarily provided in the Software Development Kit SDK available from Microsoft. The sound security knowledge and necessary programming skill are functions of training and experience. I would especially caution you that the algorithms provided within this book to help readers understand how technology works do not provide enough information for you to produce code that can correctly implement the technology. Programming security technologies is especially difficult to get right and is not a subject addressed by this book. What s Inside and What s Not Information security is not a new field. What is new is the requirement that every information technology worker emerges from being security-challenged to being security-conscious. Those who are responsible for any facet of production networks have a higher calling. They must not only be aware, but they also must be proactive. They cannot afford to merely react to the latest Internet threat. They must apply the principles of information security through their network. This book can help them. Chapter 1, "Principles of Information Security," defines these principles and relates them to the content of each chapter. Each chapter deals with a specific Windows Server 2003 security topic and provides both information and instructions for securing the server and for using its security technologies to provide protection for the network. Topics include authentication, user rights and permissions, Software Restriction Policies, Authorization Manager, NTFS, the Encrypting File System EFS , WebDAV, changes in security technologies introduced with Active Directory, securing Active Directory, trusts in an Active Directory forest between domains in different forests and between forests, Public Key Infrastructure PKI , using Routing and Remote Access and RADIUS, IPSec and PPTP, SMB signing, a role-based approach to server security, auditing monitoring, and maintenance. This book often provides a unique approach to its subject. It explains not just how to use the technology but when and why and how to use security technologies in a secure manner. An example of this approach is the two chapters on PKI. The first chapter explains the technology and details what must be done to ensure that this key security technology does increase security and not just provide a false sense of security. The second chapter details precisely how to do this. It provides the implementation details of securely implementing a two-tier Certification Authority CA hierarchy, including an offline root CA. This chapter is also an example of the type of value added by this book-it s rare to find a thoughtful security approach to a security technology, and it s even rarer to find such a step-by-step detail all in one document. While the book starts with basic security information relative to Windows Server 2003 in a workgroup or domain environment, progresses to security in an Active Directory network, and finishes by explaining the details of advanced Windows-based security technologies, an advanced reader can also benefit by jumping right to the material relevant to a specific problem or a current desire for knowledge. This is because with some exceptions, chapters are based on technical issues rather than technologies. Chapters are therefore often focused around topics such as "Securing Remote Access" RRAS, VPNs, Internet Information Server , "Securing Data in Flight" IPSec, PPTP , "Controlling Access to Data" NTFS, EFS, protecting shares, using WebDAV , "Authorization: Limiting System Access and Controlling User Behavior" user rights and permissions , or "Restricting Access to Software, Restricting Software s Access to Resources" Software Restriction Policies, Authorization Manager . This book cannot be your only source for Windows security information. It does not, for example, provide information on securing other versions of Windows. While much of the information on Windows Server 2003 is relevant to the security of earlier versions and will be relevant to future versions, much is unique to Windows Server 2003. You also won t find everything you need to know about securing IIS or securing Windows applications. It is not a book on secure programming, and it does not seek to train you in computer forensics. These topics require book-length discussions of their own. It would be presumptuous to attempt to deliver them along with everything else. This is also not a sexy book. You won t find cool hacker tricks within or justification for using a security technology based on some exploit that works if you don t utilize the hardening technique. There are far too many "I can hack into your networkand here is how to stop me" security books. You should not be relying primarily on securing your network against attacks that are so well known that they are published in a book. Instead, you should be applying the knowledge that not only works against multiple current attacks, but that also may quite possibly secure networks against exploits not yet designed. An Unusual Approach to Production The normal technical book production process, the process that is supposed to produce "the" book on "some subject," leaves much to be desired. An author is selected and writes. A technical reviewer is paid a pittance and may or may not actually find errors or step through the instructions to confirm the author s work. Editors, while they may know their grammar and how to improve writing style, are not technically trained. Finally, the process is at times rushed, and compromises have to be made. This book was done differently. In addition to the normal editorial support, numerous technical volunteers examined each chapter for content, correctness, and usability. These volunteers gave their time freely, many of them doggedly reading the entire manuscript and others concentrating on topics they felt the most comfortable with or the most interested in learning about. Every one of them contributed substantially, providing me with insight that an author usually gets only after the book is published. This book is incredibly better because of them. That said, the organization of the material is mine, and any errors although unintentional, are mine as well. Copyright Pearson Education. All rights reserved.

Windows Server 2003 Security: A Technical Reference

Certification

Addison-Wesley Professional

Ace your preparation for the skills measured by MCP Exam 70-298—and on the job—with this official Microsoft study guide. Work at your own pace through a system of lessons, practice exercises, and design activities. The Readiness Review Suite on CD, featuring advanced technology from MeasureUp, provides 300 challenging questions for in-depth self-assessment and practice. You can choose timed or untimed testing mode, generate random tests, or focus on specific objectives. You get detailed explanations for right and wrong answers—including a customized learning path that describes how and where to focus your studies. Maximize your performance on the exam by learning how to: <ul>
<li>Document the impact of business and technical constraints on the security design process</li> </ul>
Create a security design for: <ul>
<li>Logical infrastructure </li> <li>Network infrastructure for physical security</li> <li>Network management and maintenance </li> <li>Basic network functions </li> <li>Wireless networks and Web servers</li> </ul>
Readiness Review Suite on CD Powered by MeasureUp Your kit includes: <ul>
<li>NEW—Fully reengineered self-paced study guide with expert exam tips.</li> <li>NEW—Readiness Review Suite featuring 300 questions and multiple testing options.</li> <li>NEW—Practice exercises and design activities for real-world expertise.</li> <li>NEW—180-day evaluation version of Windows Server 2003, Enterprise Edition.</li> <li>NEW—eBook in PDF format.</li> <li>NEW—Microsoft Encyclopedia of Security eBook.</li> <li>Microsoft Encyclopedia of Networking, Second Edition eBook.</li> </ul>
A Note Regarding the CD or DVD Assess your skills with practice tests. You can work through hundreds of questions using multiple testing modes to meet your specific learning needs. You get detailed explanations for right and wrong answers—including a customized learning path that describes how and where to focus your studies. For customers who purchase an ebook version of this title, instructions for downloading the CD files can be found in the ebook.

MCSE Self-Paced Training Kit (Exam 70-298): Designing Security for a Microsoft® Windows Server(TM) 2003 Network

Microsoft Press

Exam 70-220, Designing Security for a Windows 2000 Network tests the skills required to analyze the business requirements for security and design a security solution that meets business requirements. Security includes controlling access to resources, auditing access to resources, authentication, and encryption. Ideal for you, professionals looking for comprehensive self-study materials to get you through the exam successfully. Years of publishing in theis category has shown us that the most asked-for type of study information comes in the comprehensive, study-at-your-own-pace package. New Riders Training Guides, with their objective coverage, emphasis on hands-on knowledge, and practice exams, are an ideal tool for this audience.

MCSE Windows 2000 Network Security Design: Training Guide Exam 70-220 (with CD-ROM)

New Riders Pub

There is no single, credible reference available for Windows 2000 security issues. Existing and announced books all offer glimpses of outdated and simplistic issues, while Roberta Bragg offers a clear vision, with focused and technically accurate practical advice. Like other books in the Landmark series, this book presumes knowledge of Windows 2000, or the willingness to look elsewhere for a guide to the Windows 2000 interface, as it is not a step-by-step guide to the operating system. (An excellent companion book would be Inside Windows 2000 Server) Its primary directive is to assist the Windows NT professional in understanding and implementing Windows 2000 security in their organization. The book is divided into four parts. Chapters will have a "best practices" section which will make recommendations for settings and security practices. An appendix will follow the main book and will include topics on auditing and security policy.

Windows 2000 Security

Sams.

This book is based on the objectives of Microsoft MCSE Exam 70-227, which is already in development at Microsoft as part of the MCSE 2000 curriculum. It covers all relevant exam material. This will not just prepare individuals to answer questions on an exam, but will help the individual understand the product and learn to work with it. It covers the exam objectives as outlined by the exam creators, not just with pat textbook answers, but with explanations, examples, and discussion focused on real-world implementation.

McSe Isa Server 2000: Training Guide : Exam 70-227

New Riders Publishing

Besides enabling the exam candidate to pass Exam 70-244, this book will teach network administrators to configure, maintain and troubleshoot Microsoft networks that still have Windows NT Server as the controlling operating system. Although officially replaced by Windows 2000, it is clear that it will be some years before Windows NT disappears from the network mainstream. There are currently tens of thousands of licensed seats of Windows NT 4.0 Server, and a full migration to Windows 2000 will not happen overnight. The CD features our ExamGear, Training Guide Edition product, including:Test simulationNearly 200 practice questionsElectronic study cardsElectronic flash cardsElectronic copy of bookAnd more!

MCSE Training Guide (70-244) Supporting and Maintaining a Windows NT Server 4.0 Network

Cooper, Jim

Maione, Dennis T.

The CISSP (Certified Information Systems Security Professionals) exam is a six-hour, monitored paper-based exam covering 10 domains of information system security knowledge, each representing a specific area of expertise. The CISSP examination consists of 250 multiple choice questions, covering topics such as Access Control Systems, Cryptography, and Security Management Practices, and is administered by the International Information Systems Security Certification Consortium or (ISC)2. (ISC)2 promotes the CISSP exam as an aid to evaluating personnel performing information security functions. Candidates for this exam are typically network security professionals and system administrators with at least 3 years of direct work experience in one or more of the 10 test domains. This book maps to the exam objectives and offers numerous features such as exam tips, case studies, and practice exams. In addition, the CD includes PrepLogic Practice Tests, Preview Edition, making it the ultimate guide for those studying for the CISSP exam.

Cissp Certification Training Guide

Pearson IT Certification

MCSE Training Guide (70-220): Windows 2000 Security Services Infrastructure, Second Edition is the perfect study guide to help readers pass one of the elective exams in Microsoft's 2000 certification program. This certification exam measures the ability to analyze the business requirements for security and design a security solution that meets business requirements. Readers preparing for this exam find the Training Guide series to be the most successful self-study tool in the market. This book is their one-stop shop because of its teaching methodology, the accompanying testing software, and superior Web site support at www.quepublishing.com/certification.The CD features PrepLogic™ Practice Tests, Preview Edition. This product includes one complete PrepLogic Practice Test with approximately the same number of questions found on the actual vendor exam and full, detailed explanations of correct and incorrect answers.

MCSE Training Guide (70-220): Windows(R) 2000 Network Security Design (2nd Edition)

MCSE Implementing and Administering Security in a Windows 2000 Network (Exam Cram 70-214) helps you pass the 70-214 exam, which is a core exam for the new Microsoft security track. This exam measures the ability to implement and administer security and network infrastructures that use Windows 2000 and Active Directory. This book is not intended to teach new material. Instead, it assumes that you have a solid foundation of knowledge but could use a refresher on important concepts, as well as a guide to exam topics and objectives. The book features test-taking strategies, time-saving study tips, and a special Cram Sheet that includes tips, acronyms, and memory joggers not available anywhere else! The Cram Sheet is especially useful for last-minute review before the test begins.
The CD features PrepLogic™ Practice Tests, Preview Edition. This product includes one complete PrepLogic Practice Test with approximately the same number of questions found on the actual vendor exam. Each question contains full, detailed explanations of the correct and incorrect answers. The engine offers two study modes, Practice Test and Flash Review, full exam customization, and a detailed score report.
The best-selling Exam Cram 2 series is supported online at examcram.com, offering industry news, study tips, practice questions, and discussion forums. Each book is published under the direction of Series Editor Ed Tittel, the leading authority on IT certification. This book has been subjected to rigorous technical review by a team of industry experts, ensuring content is superior in both coverage and technical accuracy, and has earned the distinction of Cramsession™ Approved Study Material.

Implementing and Administering Security in a Windows 2000 Network : Exam 70-214

Que Pub

See the best price to sell, buy, or rent books by Bragg, Roberta. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Bragg, Roberta