|
1) Update 2) Backup global cat Windows backup! http://technet.microsoft.com/en-us/library/bb727048.aspx http://www.jack-of-all-trades.org/?p=94 3) Audit system security http://www.microsoft.com/downloads/details.aspx?FamilyID=F32921AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en 4) Audit Users http://www.windowsecurity.com/articles/Auditing-user-accounts.html 5) Audit gpos 6) enable logging for events: Audit Active Directory Objects in Windows Server 2003 http://support.microsoft.com/kb/814595 Notes: Windows Server 2003 SP1 firewall http://support.microsoft.com/kb/555381 Create gpo: http://www.ucertify.com/article/-how-to-create-a-gpo.html IIS Lockdown Tool 2.: http://www.microsoft.com/downloads/details.aspx?familyid=DDE9EFC0-BB30-47EB-9A61-FD755D23CDEC&displaylang=en Microsoft Urlscan Filter v3.1 (x86: http://www.microsoft.com/downloads/details.aspx?familyid=EE41818F-3363-4E24-9940-321603531989&displaylang=en Microsoft Baseline Security Analyzer 2.1 (for IT Professionals: http://www.microsoft.com/downloads/details.aspx?familyid=F32921AF-9DBE-4DCE-889E-ECF997EB18E9&displaylang=en How to view and transfer FSMO roles in the graphical user interface: http://forums.techarena.in/active-directory/65268.htm Security tips: http://technet.microsoft.com/en-us/magazine/cc160982.aspx Active Directory Migration Tool v2.0 http://www.petri.co.il/active_directory_migration_tool_usage_w2k_windows_2003.htm IPSEC tools http://homepages.wmich.edu/~mchugha/w2kfirewall.htm http://technet.microsoft.com/en-us/network/bb531150.aspx http://technet.microsoft.com/en-us/library/bb742429.aspx |