winforms code 128 Hardening Servers in Visual Basic .NET

Creation Data Matrix 2d barcode in Visual Basic .NET Hardening Servers

9

3. Each file and print server has one printer and two hard drives for user data storage in addition to the system drive. You want users to be able to access the data drives on all the servers using a single directory structure and you want all users on the network to be able to send jobs to the printer on every server. Which of the fol lowing policy settings should you include in the FilePrint container s GPO (Choose all correct answers.) a. Add the shares on the file and print server drives to the Network Access: Shares That Can Be Accessed Anonymously security option b. Enable the Print Spooler service c. Disable the Microsoft Network Server: Digitally Sign Communications (Always) security option d. Enable the Distributed File System service 4. Which of the following policy changes can you configure in the GPO for the WebSvrs container to add protection from Internet intruders a. Enable the Network Access: Do Not Allow Anonymous Enumeration Of SAM Accounts And Shares security option b. Enable the Accounts: Rename Administrator Account security option c. Revoke the Administrators group s Debug Programs user right d. Disable the Interactive Logon: Do Not Require CTRL+ALT+DEL security option

1. A user calls your company s network help desk to report that she has just sent a large print job to her departmental print server by mistake and wants to delete it from the print queue. However, when she tries to access the queue, she receives the error message Unable to connect. Access denied. You log on from your workstation with the user s account and are able to access the print queue in the normal manner. Which of the following could be the problem a. The Microsoft Network Server: Digitally Sign Communications (Always) secu rity option is enabled on the print server. b. The Microsoft Network Server: Digitally Sign Communications (Always) secu rity option is enabled on the user s workstation. c. The Microsoft Network Client: Digitally Sign Communications (Always) secu rity option is enabled on the print server. d. The Microsoft Network Client: Digitally Sign Communications (Always) secu rity option is enabled on the user s workstation.

9

9-41

2. In an effort to cooperate with your company s new emphasis on security, you have used GPOs to enable all the available audit policies on the computers that are running Windows Server 2003. A few days after making these changes, you unlock the data center to find that your domain controller has shut down during the night. Which of the following modifications might prevent this from happen ing again (Choose all correct answers.) a. Revoke the Administrators group s Debug Programs user right. b. Increase the default value specified in the Maximum Security Log Size policy. c. Disable the Shutdown: Allow System To Be Shut Down Without Having To Log On security option. d. Disable the Audit: Shut Down System Immediately If Unable To Log Security Audits security option.

Summary

A Group Policy Object (GPO) is a collection of configuration parameters that you can use to secure a Windows Server 2003 installation. To deploy a GPO, you asso ciate it with an Active Directory container, and all the objects in the container inherit the GPO configuration settings. Audit and Event Log policies enable you to specify what types of information a computer logs, how much information the computer retains in the logs, and how the computer behaves when the logs are full. Windows Server 2003 loads many services by default that a member server usually doesn t need. You can use a GPO to specify the startup types for the services on a computer. The domain controller role is the only one that has its own default GPO assigned by Windows Server 2003. To create your own policy settings for domain control lers, you can modify the existing GPO or create a new one. Infrastructure servers run network support services such as DNS, DHCP, and WINS. DNS servers using Active Directory-integrated zones use the directory service to secure their data, but for servers that use file-based zones, you must take steps to secure the DNS database and log files. On NTFS drives other than the system drive on computers running Windows Server 2003, the operating system assigns the Full Control permission to the Everyone group by default. You can use a GPO to protect the files on your server drives by assigning your own file systems permissions.

9-42