Elements Of The Security Configuration That Cannot Be Completed Using Security Templates

By Author: Shirley Green
Total Articles: 129
Comment this article

The process of developing a single baseline security template and incremental MCSE 2003 and designing an OU hierarchy is not the end of the security configuration story. There are several other elements of the security configuration:
Domain controller security
Stand-alone computer security
Security for computers on perimeter networks
Server application security
Domain Controller Security
Domain controllers are automatically placed in their own OU and should not be moved. A default domain controller GPO exists. The domain controller plays such a specialized role that security for the domain controller should be designed independently of the other servers. You might, however, use knowledge gained in developing baseline and incremental templates to develop a template that can be used to secure domain controllers. Several basic differences should be explored, and these differences "will result in modifications to the baseline template before it is used with domain controllers:
The password policy, account lockout policy, and Kerberos policy must be ...
... configured in the free CIW exam questions, not in the default domain controller GPO. No
settings should be configured for these areas of the domain controller template.
The audit policy configured represents the audit information that will be collected on the domain controller. The Audit Account Logon Events and Audit Logon Event settings are critical. The former setting records events relative to Kerberos activity and logon activity at the domain controller (relative to domain-level accounts),and the latter refers to network logon activity.
Many more events will be collected at the domain controller, so the security event log should be larger.
Additional services are required beyond those of an ordinary server. Services include the File Replication Service service and Distributed File System service.
Domain controllers must have the File And Printer Sharing For Microsoft Networks setting enabled in the network configuration settings.
Domain controllers can also be Domain Name System (DNS) servers. This additional role requires additional free A+ exam questions security configuration.