加固NT和IIS的安全(国外英语资料).docVIP

加固NT和IIS的安全(国外英语资料) Reinforce the security of NT and IIS This article only tries to run the NTS 4 system of IIS 4, and if there are other applications on the server (such as Cold Fusion), then you must ensure the security of these applications themselves. The methods described below should be performed when new systems are installed to avoid unpredictable results. Also, it should be noted that this method should not be used on an internal network, such as a file server, because it removes some of the NTs commonly used default services. I. installation 1. all partitions are NTFS The server selects a separate server, does not select PDC., selects workgroup members, and does not select domains 2. install IE 4 SP2 and do not install active desktop 3. install the latest service pack: SP6a Install the latest hot patch: Q241041, Enabling, NetBT, to, Open, IP, Ports, Exclusively Q243404, WINOBJ.EXE, May, Let, You, View, Securable, Objects Created/Opened by JET500.DLL Q243405, Device, Drivers, Create, their, Corresponding DeviceObject with FILE_DEVICE_SECURE_OPEN Device Characteristics Q244599, Fixes, Required, in, TCSEC, C2, Security, Evaluation Configuration, for, Windows, NT, 4, Service, Pack, 6a. Windows, NT, Appears, to, Hang, When, You, Log, After, Off Installing Service Pack 6. Q188806, NTFS, Alternate, Data, Stream, Name, of, a, May, File Return Source Q252463, Security, Update, April 13, 2000 Q267559, Security, Update, July 17, 2000 Q269862, Security, Update, August 15, 2000 Q271652, Security, Update, September 8, 2000 4. install option pack: Select custom installation: Install only the following components: [_] Internet Information Server [_] Internet Service Manager World Wide Web Server [_] [_] Microsoft Data Access Components 1.5 [_] Data Sources [_] MDAC: ADO, OBDC and, OLE DB [_] Remote Data Service 1.5 [_] RDS Core Files [_] Microsoft Management Console [_] NT Option Pack Common Files [_] Transaction Server Transaction Server Core Components [_] Install www o