Overview Microsoft Windows XP Pro (SP2) Microsoft Windows Server 2003 User accounts and groups File sharing and file permissions Password/Lockout Policy.

Slides:



Advertisements
Similar presentations
Auditing Microsoft Active Directory
Advertisements

Chapter Five Users, Groups, Profiles, and Policies.
CREATING USER ACCOUNTS Group accounts simplify administration by organizing user accounts into a single administrative unit. They provide a convenient.
Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network.
Managing User Settings with Group Policy
Chapter 7 HARDENING SERVERS.
11 SUPPORTING LOCAL USERS AND GROUPS Chapter 3. Chapter 3: Supporting Local Users and Groups2 SUPPORTING LOCAL USERS AND GROUPS  Explain the difference.
Chapter 6: Configuring Security. Group Policy and LGPO Setting Options Software Installation not available with LGPOs Remote Installation Services Scripts.
Module 6 Windows 2000 Professional 6.1 Installation 6.2 Administration/User Interface 6.3 User Accounts 6.4 Managing the File System 6.5 Services.
Lesson 9-Securing a Network. Overview Identifying threats to the network security. Planning a secure network.
7.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 7: Introducing Group Accounts.
1 Chapter Overview Creating User and Computer Objects Maintaining User Accounts Creating User Profiles.
11 SYSTEMS ADMINISTRATION AND TERMINAL SERVICES Chapter 12.
Group Policy in Microsoft Windows Active Directory.
Guide to MCSE , Enhanced 1 Activity 10-1: Restarting Windows Server 2003 Objective: to restart Windows Server 2003 Start  Shut Down  Restart Configure.
Purpose Intended Audience and Presenter Contents Proposed Presentation Length Intended audience is all distributor partners and VARs Content may be customized.
70-270: MCSE Guide to Microsoft Windows XP Professional Chapter 5: Users, Groups, Profiles, and Policies.
Working with Workgroups and Domains
Cyber Patriot Training
Using Group Policy to Manage User Environments. Overview Introduction to Managing User Environments Introduction to Administrative Templates Assigning.
1 Group Account Administration Introduction to Groups Planning a Group Strategy Creating Groups Understanding Default Groups Groups for Administrators.
Hands-On Microsoft Windows Server 2008
6.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 6: Administering User Accounts.
Hands-On Microsoft Windows Server Security Enhancements in Windows Server 2008 Windows Server 2008 was created to emphasize security –Reduced attack.
5.1 © 2004 Pearson Education, Inc. Lesson 5: Administering User Accounts Exam Microsoft® Windows® 2000 Directory Services Infrastructure Goals 
Module 10: Configuring Windows XP Professional to Operate in Microsoft Networks.
Fall 2011 Nassau Community College ITE153 – Operating Systems Session 22 Local Security Polcies 1.
Section 1: Introducing Group Policy What Is Group Policy? Group Policy Scenarios New Group Policy Features Introduced with Windows Server 2008 and Windows.
Module 11: Remote Access Fundamentals
DIT314 ~ Client Operating System & Administration CHAPTER 5 MANAGING USER ACCOUNTS AND GROUPS Prepared By : Suraya Alias.
Chapter 13 Users, Groups Profiles and Policies. Learning Objectives Understand Windows XP Professional user accounts Understand the different types of.
Overview Introduction to Managing User Environments Introduction to Administrative Templates Using Administrative Templates in Group Policy Assigning Scripts.
Module 9: Preparing to Administer a Server. Overview Introduction to Administering a Server Configuring Remote Desktop to Administer a Server Managing.
Introduction to Microsoft Management Console (MMC) MMC is a common console framework for management applications. MMC provides a common environment for.
Module 7: Managing the User Environment by Using Group Policy.
Active Directory Harikrishnan V G 18 March Presentation titlePage 2 Agenda ► Introduction – Active Directory ► Directory Service ► Benefits of Active.
Implementing Group Policy. Overview What is Group Policy Introduction to Group Policy Group Policy Structure How Group Policy Settings Are Applied in.
Planning a Microsoft Windows 2000 Administrative Structure Designing default administrative group membership Designing custom administrative groups local.
GPO - WINDOWS SERVER AGENDA: Introduction Group Policy Overview Types of Group Policies/Objects Associated Technologies How to implement.
CHAPTER Creating and Managing Users and Groups. Chapter Objectives Explain the use of Local Users and Groups Tool in the Systems Tools Option to create.
Module 14: Securing Windows Server Overview Introduction to Securing Servers Implementing Core Server Security Hardening Servers Microsoft Baseline.
Working with Workgroups and Domains Lesson 9. Objectives Understand users and groups Create and manage local users and groups Understand the difference.
Module 4 Planning for Group Policy. Module Overview Planning Group Policy Application Planning Group Policy Processing Planning the Management of Group.
Minimizing your vulnerabilities. Lets start with properly setting up your servers which includes… Hardening your servers Setting your file and folder.
Fall 2011 Nassau Community College ITE153 – Operating Systems Session 21 Administering User Accounts and Groups 1.
NetTech Solutions Supporting Local Users and Groups Lesson Three.
Module 7: Implementing Security Using Group Policy.
NetTech Solutions Security and Security Permissions Lesson Nine.
Week 4 Objectives Overview of Group Policy Group Policy Processing Implementing a Central Store for Administrative Templates.
CHAPTER 5 MANAGING USER ACCOUNTS & GROUPS. User Accounts Windows 95, 98 & Me do not need a user account like Windows XP Professional to access computer.
Windows Administration How to protect your computer.
ITMT Windows 7 Configuration Chapter 10 – Securing Windows 7
Chapter Objectives In this chapter, you will learn:
Nassau Community College
Module 9: Preparing to Administer a Server
Chapter 6 Application Hardening
Configuring Windows Firewall with Advanced Security
HARDENING CLIENT COMPUTERS
Objectives Differentiate between the different editions of Windows Server 2003 Explain Windows Server 2003 network models and server roles Identify concepts.
Creating and Managing User Accounts
Unit 3 NT1330 Client-Server Networking II Date: 1/6/2016
Lesson 16-Windows NT Security Issues
Securing Windows 7 Lesson 10.
Security through Group Policy
Windows Server Administration Fundamentals
BACHELOR’S THESIS DEFENSE
Operating System Hardening
Module 9: Preparing to Administer a Server
Designing IIS Security (IIS – Internet Information Service)
Bethesda Cybersecurity Club
Presentation transcript:

Overview Microsoft Windows XP Pro (SP2) Microsoft Windows Server 2003 User accounts and groups File sharing and file permissions Password/Lockout Policy Group Policy –Security Policy –Administrative Templates

Many security layers Keep in mind that when it comes to securing a network, there are many security layers and many different types of security that may be enforced.

Active Directory Active Directory (AD) is a component of Microsoft Server AD technology is based on standard Internet protocols. Uses the Domain Name System (DNS). DNS is a standard Internet service that organizes groups of computers into domains.

Active Directory Provides centralized authentication and authorization services for Windows based computers. Allows administrators to assign policies, deploy software, and apply updates to an entire network.

Active Directory

Microsoft Server 2003 File Server Print Server Application Server Domain Controller Mail Server Terminal Server VPN Server DHCP Server Server 2003 can be used as a server for a number of different things. Along with the examples we mentioned in class, a server can also be used for the above tasks. A server can do many things, they are not limited to the items on this screen.

Windows Networking without a Server Managing a network without a Domain Controller can be difficult. Keeping the network secure is even more difficult. Usually a peer-to-peer network. Vulnerable to viruses and being hacked.

Windows Networking without a Server Keep your computer up to date by running Windows Updates. –Security Patches

Windows Networking without a Server Use Anti-Virus software to protect against Trojans, Worms, and other malicious software.

Windows Networking without a Server Enable Windows Firewall Only allow exceptions for the services that are absolutely necessary for the network.

Windows Networking without a Server The use of user accounts will help protect hackers from gaining access to your peer-to-peer network. Strong passwords Non-administrator account

Windows Networking without a Server Automatic Updates Virus Protection Firewall Users accounts Disable Windows Services

Windows Networking with a Server Allows better control of user accounts and user groups. (AD) Allows updates to be forced to computers. (AD) More secure and organized file/print sharing. Allows strong security policies. Policies can be forced to computers.

Windows Networking with a Server User Accounts Enables better security and better user account control. Roaming Profiles Remote Access Dial-in Access Logon Hours Ability to disable accounts Groups

Windows Networking with a Server File Permissions Server 2003 allows an administrator to assign file permissions to files, folders, and printers shared across the network. Permissions can be set for a specific user, or a group of users. NTFS permissions can be set with a Graphical User Interface or the command line.

Windows Networking with a Server File Permissions Share PermissionsNTFS Permissions

Windows Networking with a Server Password Policy Server 2003 allows an administrator to set a password policy for all users to abide by. Password History Password Age Password Length Complexity Requirements

Windows Networking with a Server Password Policy

Windows Networking with a Server Account Lockout Policy Server 2003 allows an administrator to set an account lockout policy.

Windows Networking with a Server Group Policy Allows an administrator to enforce various policies to the entire network, domain or specific Organization Unit (OU).

Windows Networking with a Server Group Policy: Security Policy Restrict access to the CD-ROM and Floppy Drive Disconnect users when logon hours expire Let “everyone” permissions apply to anonymous Access the registry remotely Access shares anonymously

Windows Networking with a Server Group Policy: Administrative Templates Remove icons from the desktop (i.e. My Computer, Network Places, etc.) Allow/Deny access to the Control Panel Restrict display settings (i.e. force background, no screensaver) Remove items from the Ctrl + Alt + Del menu (i.e. Task Manager, Lock Computer, Change Password)

Windows Networking with a Server Group Policy

Windows Networking with a Server User Accounts Password Policy Group Policy –Security Policy –Administrative Templates File Permissions Account Lockout Policy

Anthony J. Arduini Management Information Systems October 2007