Windows Forum

Ask something
Discussion Locked

ISA Server Security Configuration wizard

0 helpful
5 replies

by loveanne 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi! Somebody please tell me what exactly is the isa server doing when it hardens the system using the "Secure the Isa Sever computer" wizard for the 3 different options: (dedicated, limited services, secure)? That is, which services will be disabled, etc.? Will it do anything else than just disabling services? for example will certain Windows 2000 components be uninstalled?

Thank you very much in advance.

5 replies

by ann777

Essentially "Secure the ISA server Computer Wizard" is a wizard for building a firewall. Explanations and details can be found within "Deploying and Managing Microsoft Internet Security and Acceleration Server 2000." This is a two-day course.

by loveanne

Thank you for you assistance. But I need to try it immediately and there is no offer here in my location for the 2-day course.

by rkelly

Hi,

all that happens when you Harden the System using the ISA Security wizard is the following.

If you go for the secure option it applies the Hi Security Server or High Security Domain Controller security policy - for a complete list of EXACTLY what happens load the security template into the Security Templates MMC Snap-in.

For dedicated and limited services it loads either the Secure or Default template respectivly.

All these templates are stored in %systemroot%\security\templatesand they specify service start up, registry premissions and keys and file system security. You will have to use common sense in order to work out which policy is which (but the domain controller ones all end in DC and the Server ones end in SV).

Nothing should be uninstalled, but you may find that components such as OS2 and POSIX support are removed for you in a secure environment - they are provided for backwards compatibilty and actually reduce the security of your system.

This discussion is closed to new replies.