Guidelines For Analyzing Baseline Security Template Samples

By Author: Shirley Green
Total Articles: 129
Comment this article

The best and most comprehensive templates and explanations for the use of security templates are in thein the Microsoft MCSE 2003 Windows Server 2003 Security Guide(identified in the rest of this section as "the guide"). In addition to providing and explaining a member server baseline template, the guide also provides templates and recommendations for domainwide security and infrastructure and for many common server roles. This is an impressive piece of work and should be a part of your security toolkit. However, you should not blindly implement the provided templates (nor should you do so for any other preconfigured security template offering). The following guidelines specifically address the Microsoft guide and its templates, but they can be used in a similar fashion to review other guides and templates.
Examine the guide and all templates. The guide provides a solution that identifies three levels of security. Select the level—Legacy client (servers must be accessible to clients other than Windows 2000 and XP Professional), Enterprise Client, or High MCITP study guides free download ...
... that matches your needs. The level names allude to the operating systems that can be present if this template is used for the servers. Table 8-3 defines the operating systems that are allowed in each level. You might also find that all three templates are applicable.
You might find that information from other template recommendations is useful. You should also use product documentation, TechNet resources, books, and whitepapers to supplement the guide.

Examine each section of the template recommendations, but don't disregard how sections or parts of sections work together. See the topic "Considerations for Interpreting a Security Policy and Applying Parts of It to a Baseline Security Template" earlier in this lesson.
Each part of the Account Lockout Policy is dependent on the other parts. You cannot simply make a choice on one without considering the others.
There have been cases where a user with this right was able to elevate his privileges to administrator and thus take over a computer. Note how the template removes a right free Network+ study guides that could prove dangerous in the wrong hands— a right that is not necessary anyway in a production environment.