MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide

9.1. Establishing a Security Baseline

Effectively, a security baseline is the process of formally gathering certain pieces of data and applying them throughout the enterprise in such a way that all present, past, and future server deployments use this foundation as a guideline for the rest of their lifetime. Establishing a security baseline is a multistep process that involves four major components:

• Active Directory design

• Security policies

• Server scope definition

• GPO design

I've already discussed some of these topics, such as Active Directory design, GPO design, and security policies, in detail.

For administrators creating their first deployment of Windows Server 2008, establishing a security baseline has become much easier. Previously, other ...