Security Enhancements in Windows Server 2008.ppt

* * * * * * * * * * * * * Hands-On Microsoft Windows Server 2008 Hands-On Microsoft Windows Server 2008 * Security Enhancements in Windows Server 2008 Windows Server 2008 was created to emphasize security Reduced attack surface of the kernel through Server Core Expanded group policy Windows Firewall Network Access Protection Security Configuration Wizard User Account Control BitLocker Drive Encryption Hands-On Microsoft Windows Server 2008 * Security Enhancements in Windows Server 2008 (continued) Server Core is a good solution for a Web or other server in the demilitarized zone of a network Demilitarized zone (DMZ) A portion of a network that is between two networks, such as between a private network and the Internet New group policy categories include: Power management Assigning printers by location Delegation of printer driver installation Security settings Internet Explorer settings Hands-On Microsoft Windows Server 2008 * Introduction to Group Policy Group policy in Windows Server 2008 Enables you to standardize the working environment of clients and servers by setting policies in Active Director Defining characteristics of group policy: Group policy can be set for a site, domain, OU, or local computer Group policy cannot be set for non-OU folder containers Group policy settings are stored in group policy objects Hands-On Microsoft Windows Server 2008 * Introduction to Group Policy (continued) Defining characteristics of group policy: (continued) GPOs can be local and nonlocal Group policy can be set up to affect user accounts and computers When group policy is updated, old policies are removed or updated for all clients Hands-On Microsoft Windows Server 2008 * Securing Windows Server 2008 Using Security Policies Security policies are a subset of individual policies Within a larger group policy for a site, domain, OU, or local computer Security policies include: Account Policies Audit Policy User Rights Security Options IP Security Policies Hands-On Microsoft