Lesson 4

Using the SCW to Harden Servers

9-45

Important Before starting this practice, ensure the computer is running Windows Server

2003 with SP1.

Exercise 1: Installing the SCW

A default installation of Windows Server 2003 with SP1 does not include the SCW.

Therefore, in this exercise, you install the SCW by completing the following steps:

1. In Control Panel, double-click Add Or Remove Programs.

2. Click Add/Remove Windows Components, select the Security Configuration Wiz-

ard check box, and then click Next.

3. When the installation has completed, close Add/Remove Windows Components.

4. Close Control Panel.

Exercise 2: Creating an SCW Security Policy

In this exercise, you create an SCW Security Policy and exclude any network security

settings. To create an SCW Security Policy, complete the following steps:

1. Click Start, click Administrative Tools, and then click Security Configuration Wizard.

2. Read the Welcome page and click Next.

3. Select Create A New Security Policy and then click Next.

4. Leave the default name for the prototype server and then click Next.

5. When processing is complete, click Next.

6. On the Role-Based Service Configuration page, click Next.

7. On the Select Server Roles page, click Next.

8. On the Select Client Features page, click Next.

9. On the Select Administration And Other Options page, click Next.

10. On the Select Additional Services page, click Next.

11. On the Handling Unspecified Services page, select Do Not Change The Startup

Mode Of The Service and click Next.

12. On the Confirm Service Changes page, click Next.

13. On the Network Security page, select the Skip This Section check box and click

Next.

14. On the Registry Settings page, click Next.

15. On the Require SMB Security Signatures page, click Next.