Locking Down Windows Servers

For Windows Servers, follow the fundamental lockdown principles outlined earlier and the steps for locking down Windows Clients. For servers, the stakes are higher because a server usually runs some critical software such as a Microsoft SQL Server database, a Microsoft Exchange messaging system, or IIS. If an intruder takes down a client, he takes down one machine. If he takes down a server, the whole application is often disabled. The following sections outline some extra steps for securing servers.

Isolate Domain Controller

Because a domain controller plays such a critical role—maintaining and validating user accounts—it’s recommended you don’t use this for any role other than as a domain controller. File and printer ...

Get Security for Microsoft® Visual Basic® .NET now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.