Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows 2000
    - Admin Tips
      - Security

Knowledge Base Tips topic

[	3384	]	Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base	Last updated: Nov 05, 2009
[	13	]	Active Directory	Last updated: Oct 22, 2009
[	4	]	Command shell	Last updated: Apr 20, 2004
[	11	]	Customization	Last updated: Sep 17, 2008
[	8	]	Event log	Last updated: Mar 18, 2005
[	6	]	IE	Last updated: Apr 20, 2004
[	31	]	Miscellaneous	Last updated: Oct 01, 2008
[	17	]	Network	Last updated: Jan 06, 2009
[	10	]	Registry Tools	Last updated: Dec 18, 2008
[	16	]	Restriction	Last updated: Apr 20, 2004
[	5	]	Miscellaneous	Last updated: Sep 08, 2009
[	15	]	Applications	Last updated: Apr 01, 2009
[	10	]	Boot	Last updated: Apr 20, 2004
[	12	]	Command Prompt	Last updated: Apr 20, 2004
[	26	]	Customization	Last updated: Jun 22, 2004
[	13	]	IE and Explorer	Last updated: Jun 15, 2006
[	34	]	Miscellaneous	Last updated: Mar 07, 2005
[	10	]	Performance	Last updated: Apr 20, 2004
[	9	]	Security	Last updated: Aug 21, 2008
[	17	]	TroubleShooting	Last updated: Jan 07, 2009
[	16	]	Booting	Last updated: Dec 10, 2008
[	34	]	Customization	Last updated: Jul 30, 2009
[	9	]	Drivers	Last updated: Jul 31, 2007
[	13	]	IE and Explorer	Last updated: Jan 31, 2006
[	64	]	Miscellaneous	Last updated: Jul 22, 2009
[	61	]	Network	Last updated: Aug 12, 2009
[	67	]	Security	Last updated: Aug 12, 2009
[	46	]	TroubleShooting	Last updated: May 13, 2009
[	33	]	Utilities	Last updated: Sep 24, 2008
[	7	]	Command shell	Last updated: Jan 18, 2006
[	15	]	Customization	Last updated: Sep 09, 2009
[	12	]	Disable - Hide	Last updated: Mar 22, 2006
[	6	]	IE	Last updated: Apr 20, 2004
[	23	]	Miscellaneous	Last updated: Dec 10, 2008
[	11	]	Network	Last updated: Jun 19, 2008
[	12	]	Security	Last updated: Jul 05, 2006
[	12	]	Boot	Last updated: Oct 01, 2008
[	8	]	Command Prompt	Last updated: Apr 20, 2004
[	40	]	Customization	Last updated: Jun 26, 2008
[	14	]	IE and Explorer	Last updated: Apr 23, 2008
[	39	]	Miscellaneous	Last updated: Jun 18, 2009
[	24	]	Network and Security	Last updated: Jun 03, 2009
[	5	]	Outlook and Outlook Express	Last updated: Sep 09, 2009
[	11	]	Performance	Last updated: Jan 09, 2008
[	20	]	TroubleShooting	Last updated: Sep 16, 2005
[	24	]	Utilities	Last updated: Apr 08, 2009

Security Tips

Sort By: Title | Date | Rating

Tips for Securing Your Wireless LAN: Date - Feb 04, 2009; Rating - 3.5; Author - Eric Geier; Ways to protect your Wi-Fi network from eavesdroppers and hackers.
Adding Pop-Up Blocker Exceptions via GPO: Date - Dec 22, 2005; Rating - 4.1; Author - Chris Sanders; Occasionally there are sites that we as domain administrators need to allow pop-ups for across the board. This tip shows how to do this with Group Policy.
Gaps in Security Log: Date - Jul 14, 2005; Rating - 4.5; Author - Mitch Tulloch; You found a gap of several hours in your Security log, what does it mean?
Get the Latest ADM Files: Date - Jul 12, 2005; Rating - 2.8; Author - Mitch Tulloch; How to obtain the latest Administrative Template files from Microsoft.
XP SP2 Breaks Group Policy: Date - Jun 09, 2005; Rating - 2.8; Author - Mitch Tulloch; Resolving an issue with adm files in XP SP2.
Setting up Windows 2000 Radius to authenticate wireless 802.1x clients: Date - May 03, 2005; Rating - 4.3; Author - Robert Vegas; How to set up RADIUS on Windows 2000 so you can autheticate wireless clients.
Map Your Network For Better Protection and Incident Response: Date - Apr 01, 2005; Rating - 3.7; Author - Tony Bradley; It is difficult to protect devices that you don't even know exist. In larger enterprises it is very easy to lose track of the asset inventory which leads to complacency about rogue devices. In order to effectively protect the network and to respond to incidents efficiently, an updated asset inventory and network map should always be handy.
Using Reservations to Ensure DHCP Server Availability and Security: Date - Mar 24, 2005; Rating - 3.5; Author - Mitch Tulloch; In high security environments you can use Reservations to ensure the security and availability of DHCP servers.
Protect Wireless Access Using MAC Address Filters: Date - Mar 22, 2005; Rating - 4.2; Author - Tony Bradley; Wireless networks add a significant level of convenience for many users. The ability to roam at will and access the network without adding wires is quite useful. But, you need to do so securely. There are a number of basic steps you should take to protect your wireless network and filtering MAC addresses is one more way to secure it.
Google Yourself To Identify Security Holes: Date - Mar 15, 2005; Rating - 4; Author - Tony Bradley; Google is very good at what it does. It automatically and systematically catalogues every document, image, web site or other data that is web accessible so that it can be quickly retrieved using the Google search engine. That includes potentially sensitive or confidential data that wasn't intended to be shared publicly. Google your own network or sites to identify possible security holes.
Disable Enumeration of SID's: Date - Mar 08, 2005; Rating - 4.5; Author - Tony Bradley; One way for an attacker to scope out a target system and, particularly, to identify the Administrator account so they can focus their efforts on the account with the most privileges is to list, or enumerate, the SID's (serial identifiers) on a Windows machine.
Microsoft Baseline Security Analyzer (MBSA): Date - Mar 07, 2005; Rating - 3.6; Author - Wayne Maples
Remove Administrative Shares: Date - Jan 20, 2005; Rating - 4.5; Author - Tony Bradley; Windows creates hidden Administrative Shares at the root of each drive and to the system root folder to allow administrators to remotely access the data. If a server or workstation will not be administered remotely or has no need for the Administrative Shares though, they should be removed so that they don't provide a potential attack vector for a hacker or malware to enter the system.
Enable Security Event Logging: Date - Dec 16, 2004; Rating - 4.5; Author - Tony Bradley; Installing an alarm system on your home or car can be an effective way of at least being alerted when some sort of intrusion has been attempted. Of course, they don't work very well when they aren't enabled. Windows XP comes with the means to detect and log security events so that you can monitor and respond to intrusions or attempted security breaches, however it is not enabled by default.
Sample security policies and guidelines: Date - Nov 09, 2004; Rating - 2.4; Author - Wayne Maples
SQL Server worm exploits blank sa password: Date - Apr 20, 2004; Rating - 4.3; Author - Wayne Maples
Ssh Secure Shell Resources: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Portslock for Windows NT / 2000 / XP: Date - Apr 20, 2004; Rating - 2.5; Author - Wayne Maples
Scanners, sniffers, network analyzers, traffic monitors, port scanners: Date - Apr 20, 2004; Rating - 3.2; Author - Wayne Maples
Monitor and capture all text a program writes to the screen: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Restricting Concurrent Logons: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
SmbRelay captures NTLM hashes: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples
Wayne's Forensics and Incident Response Resources: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Wayne's IDS Intrustion Detection Systems Tips and Resources: Date - Apr 20, 2004; Rating - 3.8; Author - Wayne Maples
Keystroke loggers and spy software / hardware: Date - Apr 20, 2004; Rating - 3.7; Author - Wayne Maples
Change Detection / Integrity Resource / Rootkits: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Wayne's Denial of Service (DoS) Resource: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Windows Freeware and Commercial Personal Firewalls for SOHO Small Office and Home: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Disable Windows NT alt-ctrl-del dialog buttons: Date - Apr 20, 2004; Rating - 4.2; Author - Wayne Maples
Enforce strong passwords: Date - Apr 20, 2004; Rating - 4.1; Author - Wayne Maples
Backdoors : backorifice, subseven, netbus: Date - Apr 20, 2004; Rating - 2.9; Author - Wayne Maples
Tokenmon monitors NT and Windows 2000 logon/logoff and security privilege token creation/deletion: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples
SSH / SCP for Windows NT / W2K / XP: Date - Apr 20, 2004; Rating - 3.8; Author - Wayne Maples
Windows 2000 USB Permissions: Date - Apr 20, 2004; Rating - 4.4; Author - Wayne Maples
secedit: Date - Apr 20, 2004; Rating - 3.4; Author - Wayne Maples
Securing Windows 2000 Network Resources Scenario Guide: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Windows 2000 Default Security Policy Templates: Date - Apr 20, 2004; Rating - 3.9; Author - Wayne Maples
NSA Guides to Securing Windows 2000: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Hardening Windows 2000: Date - Apr 20, 2004; Rating - 1; Author - Wayne Maples
Microsoft Security Notification Service: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Kerberos and Windows 2000: Date - Apr 20, 2004; Rating - 4.7; Author - Wayne Maples
Security Communications, Windows 2000 and the OSI Model: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
System Scanner for Windows: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
IPSec Tips and Resources: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples
Securing Windows 2000 Communications with IP Security Filters: Part One: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Securing Windows 2000 Communications with IP Filters: Part Two: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Pre-Windows 2000 Compatible Access Group permission vulnerability: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Protocol Numbers and Assignment Services: Date - Apr 20, 2004; Rating - 1; Author - Wayne Maples
Internet Explorer Security Zones Registry Entries: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Manage W2K's EFS with EFSinfo: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Upgrade Windows 2000 installation to 128-bit encryption: Date - Apr 20, 2004; Rating - 3.8; Author - Wayne Maples
Windows 2000 Security Checklists: Hardening Windows 2000: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
How to Import a Third-Party Certificate into the NTAuth Store: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Configure Windows 2000 stack to resist network Denial of Service: Date - Apr 20, 2004; Rating - 4.4; Author - Wayne Maples
Windows 2000 Encrypting File System EFS: Date - Apr 20, 2004; Rating - 3.4; Author - Wayne Maples
Steganography Resources: Date - Apr 20, 2004; Rating - 2.4; Author - Wayne Maples
Disable Windows Scripting Host ( WSH ): Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Block users from installing MSI installed applications: Date - Apr 20, 2004; Rating - 3.7; Author - Wayne Maples