Harden'd Server - How to....

Wow...what a topic! It could fill many pages. For the sake of space and readability, I'll throw a few links out.

The NSA has a lot of good security info in general but also has a lot relating to Windows. They have security templates that can be applied to the machines. Take a look at what they have here: http://www.nsa.gov/snac/index.html

Also, anyone taking the GIAC Windows Security Administrator exams must complete a practical. The completed practicals are posted here so anyone can read them. Some of them are quite good. http://www.giac.org/GCWN.php

Cheers!
~Sean

there are step by step instructions for each os available at www.cert.org

thats to broad;
is it a webserver, ftp, nt based, w2k, etc etc

check out http://tinyurl.com/1s2v
and http://tinyurl.com/vr1p
http://tinyurl.com/vr1q

microsoft also has a base security analyzer
http://tinyurl.com/h17f

Leopold

Try http://www.siterecon.com and look to the left side. They have some good docs there on hardening the server. Alot depends on what you are using the Server for.

Microsoft has a lockdown tool as well and they have some good checklists for IIS at

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/chklist/iischk.asp

This question was closed by the author