|
Objective 1.3
Plan Security for Servers That Are Assigned Specific Roles
14-17
■
Application servers Application servers, including Web, database, and e-mail
servers, typically have their own security features, which you can implement
as
part of your security configuration for that role. Internet Information
Services (IIS),
which provides Web, File Transfer Protocol (FTP), and other Internet
services, is
integrated into Windows Server 2003, but most server applications are
separate
products with built-in security features. As a result, you might not be able
to
implement these features using standard Windows Server 2003 mechanisms, such
as Group Policy Objects, but other ways of automating the deployment of
these
security mechanisms might be available.
Security templates provide a mechanism for saving, manipulating, and
deploying
security configurations on computers running Windows Server 2003. A security
tem-
plate is a plain text file, with an .inf extension, that contains values for
the configura-
tion parameters found in Group Policy Objects. Storing configurations as
security
templates enables you to restore a computer to its previous configuration
quickly and
easily; compare a computer’s current configuration settings to those in a
template; and
integrate the deployment of security configurations into scripts or batch
files.
You can deploy security templates in four ways: by importing them into Group
Policy
Objects, by using the Security Configuration And Analysis snap-in to apply
them to
individual computers, by using the SECEDIT.EXE command-line utility, or for
servers
running Windows Server 2003 with SP1, by using the SCW.
|