Thursday, April 14, 2005
Windows Security Configuration Wizard
Last week, we talked about the new Windows Security Configuration Wizard which is included in Windows Server 2003 Service Pack 1. What is it? What does it do? Here’s the short scoop on SCW: Microsoft describes it as an “attack surface reduction tool”. It Disables unneeded services, blocks unused ports, further restricts those ports that are left open, prohibits (if applicable) unnecessary IIS web extensions, reduces security threats posed by SMB, LanMan, and LDAP, and defines an audit policy that is more sensitive to security-related events. Configurable from either the GUI or the CLI, SCW is another step Microsoft is taking in enhancing the security of their products. For Microsoft shops, it’s a welcome advance. For non-Microsoft shops, it’s another tool MS is using to try to lure you into their fold. More info on SCW is here. Learn more about SCW and other security technologies in our two-day Windows Server 2003 seminar, available for onsite presentation at your location for groups of four or more. Click here on call 206.988.5858 for more information.