The Security Configuration Wizard (SCW), part of Windows Server 2003 Service Pack 1 and Windows Server 2003 R2, is an easy way to automate the rollout of a consistent file server security policy. The SCW supports what is, in effect, an auditing mode. It begins by examining a machine and reporting the roles assigned to it. You can go a few steps further with the active configuration mode, which allows you to simply tell the wizard what roles should be assigned to the server. The SCW will configure the server itself, turning services and ports on and off as needed.
To install the Security Configuration Wizard, you must be an administrator -- either a local administrator or a domain administrator.
Begin by following these steps:
To apply the settings from the SCW:
You can proceed through the remainder of the wizard, as some of the individual settings will vary depending on the structure of your environment.
Configure security settings manually
If you aren't running Windows Server 2003 Service Pack 1, then you won't have the option to use the Security Configuration Wizard. In this case, you won't go wrong with the following settings and options enabled to further secure your file server:
<
To continue reading for free, register below or login
To read more you must become a member of SearchEnterpriseDesktop.com
b>Generate a security template
Again, if you don't have Service Pack 1, it's a good idea to manually create a security template so you can consistently apply the same security settings to multiple file servers that may reside within your organization. You can generate security templates and save them by putting the Security Templates add-in into any Microsoft Management Console window.
The Security Configuration Wizard has an option that exports all settings configured in or by the wizard to an .inf file. You can then roll out the settings to any number of machines across your enterprise via the SCW or some other method. This is a very convenient, automated way to achieve a unified security policy across any server, not just a file server.
About the author: Jonathan Hassell is author of Hardening Windows (Apress LP) and is a SearchWindowsSecurity.com site expert. Hassell is a systems administrator and IT consultant residing in Raleigh, N.C., who has extensive experience in networking technologies and Internet connectivity. He runs his own Web-hosting business, Enable Hosting. His previous book, RADIUS (O'Reilly & Associates), is a guide to implementing the RADIUS authentication protocol and overall network security.
