1. Managing Network Security ref:www.microsoft.com

2. Overview Using Group Policy to Secure the User Environment Using Group Policy to Configure Account Policies Analyzing Security Log Files to Detect Security Breaches Securing the Logon Process Examining Service Packs, Hotfixes, and Antivirus Software

3. Using Group Policy to Secure the User Environment Applying security policies Select the Security Settings node By configuring security settings individually individually Select the security setting to configure Configure the security setting By importing the security template Identify or create a security template Import the security template into a Group Policy object Analyze the security settings

4.  Using Group Policy to Configure Account Policies What Are Account Policies? Configuring Password Policy Settings Configuring Account Lockout Policy Settings

5. What Are Account Policies? Use account policies to prevent unauthorized persons from gaining access to the network Must set Group Policy at domain level Set password requirements to Domain controller does not authenticate Domain controller locks out user account Set failed logon attempts limit to Ensure passwords are difficult to guess Stop brute force hacking programs

6. Configuring Password Policy Settings Password settings apply to the domain The settings to configure are: Group Policy Action View Passwords [LONDON.NWTraders.msft Computer Configuration Software Settings Windows Settings Security Settings Account Policies Account Lockout Poli Kerberos Policy Local Policies Allow storage of passwords under reversibl… Enforce password uniqueness by remem … Maximum Password Age Minimum Password Age Minimum Password Length Passwords must meet complexity require … User must logon to change password Not Configured 24 Passwords 30 Days 8 Characters Enabled AttributeStored Template Settin Password Policy The number of previous passwords Windows 2000 records

7. Configuring Account Lockout Policy Settings Account lockout policy settings apply to domains You must configure all account lockout policy settings or none Group Policy Action View Account Lockout [LONDON.NWTraders.msft Computer Configuration Software Settings Windows Settings Security Settings Account Policies Password Policy Account Lockout Policy Kerberos Policy Local Policies Account Lockout Policy Attribute Stored Template Settin Account lockout control Lockout account for Reset account lockout count after 5 Invalid logon attempts Forever 1440 Minutes The amount of time before the lockout counter returns to zero Limit on failed logon attempts Amount of time that the lockout is in effect

8.  Analyzing Security Log Files to Detect Security Breaches Security Logs and Event Viewer Common Security Events

9. Invalid Logon Attempts and Account Lockout Change of File Ownership Clearing of the Security Log System Shutdown

10.  Securing the Logon Process Examining Smart Cards Enabling Smart Card Authentication

11. Examining Smart Cards Interactive Logon Process Remote Access

12. Examining Service Packs, Hotfixes, and Antivirus Software Hotfixes and Service Packs Antivirus Software Viruses Attacks Antivirus Software Security Hotfixes

13. Review Using Group Policy to Secure the User Environment Using Group Policy to Configure Account Policies Analyzing Security Log Files to Detect Security Breaches Securing the Logon Process Examining Service Packs, Hotfixes, and Antivirus Software