Outcome 3: Implement secure network administration procedures

Table of Contents

1. Windows Server 2003 Security Features
   1. Physical Access
   2. Principle of Least Privilege
   3. Develop a Security Policy
   4. Security Baseline Settings
   5. Microsoft Baseline Security Analyzer
   6. Using the GUI Version of MBSA
   7. Security Templates
   8. Built-in Security Templates
   9. Group Membership and Privileges
   10. Secure Local PC Systems
   11. Securing the SAM Database
   12. Enforce a Strong Password Policy
   13. Do Not Run Unknown programs
   14. Keep Virus Software up-to-date
   15. Keep Operating System Current
2. NTFS File and Folder Permissions
3. Software Update Infrastructure
4. Network Protocol Security
5. Self Assessment Questions (SAQs)
6. Summary: Implementing secure network administration procedures
7. Summary: Software Update infrastructure

Microsoft Baseline Security Analyzer

The Microsoft Baseline Security Analyzer (MBSA) is a security assessment utility that can be downloaded from the Microsoft website. It checks whether your computer has the latest security updates and whether any common security violation configurations have been applied to your computer. MBSA scans the following programs and operating systems:

• Windows NT 4, Windows 2000, Windows XP and Windows Server 2003
• IIS 4 and 5
• Internet Explorer, versions 5.01 and higher
• SQL Server 7 and SQL Server 2000
• Microsoft Office 2000 and Microsoft Office XP
• Windows Media Player, versions 6.4 and higher

A computer must meet the following requirements to use MBSA:

• Windows NT 4, 2000, Windows XP, or Windows Server 2003
• Windows Explorer 5.01 or higher
• XML parser installed for full functionality
• Workstation and Server services enabled
• Client for Microsoft Networks installed

After Mbsasetup.msi has been downloaded and installed from the Microsoft site, MBSA can be run through a GUI version from Start > All Programs > Microsoft Baseline Security Analyzer, or you can use Mbsacli.exe from the command-line.

Next: Using the GUI Version of MBSA