|
Lesson 4
Using the SCW to Harden Servers
9-45
Important Before starting this practice, ensure the computer is running
Windows Server
2003 with SP1.
Exercise 1: Installing the SCW
A default installation of Windows Server 2003 with SP1 does not include the
SCW.
Therefore, in this exercise, you install the SCW by completing the following
steps:
1. In Control Panel, double-click Add Or Remove Programs.
2. Click Add/Remove Windows Components, select the Security Configuration
Wiz-
ard check box, and then click Next.
3. When the installation has completed, close Add/Remove Windows Components.
4. Close Control Panel.
Exercise 2: Creating an SCW Security Policy
In this exercise, you create an SCW Security Policy and exclude any network
security
settings. To create an SCW Security Policy, complete the following steps:
1. Click Start, click Administrative Tools, and then click Security
Configuration Wizard.
2. Read the Welcome page and click Next.
3. Select Create A New Security Policy and then click Next.
4. Leave the default name for the prototype server and then click Next.
5. When processing is complete, click Next.
6. On the Role-Based Service Configuration page, click Next.
7. On the Select Server Roles page, click Next.
8. On the Select Client Features page, click Next.
9. On the Select Administration And Other Options page, click Next.
10. On the Select Additional Services page, click Next.
11. On the Handling Unspecified Services page, select Do Not Change The
Startup
Mode Of The Service and click Next.
12. On the Confirm Service Changes page, click Next.
13. On the Network Security page, select the Skip This Section check box and
click
Next.
14. On the Registry Settings page, click Next.
15. On the Require SMB Security Signatures page, click Next.
|