Windows6--实现Windows安全

Assign Security Settings to a Single Computer by Configuring the Settings in Local Policies in Group Policy

Assign Security Settings to Multiple Computers by Creating a Group Policy Object and Assigning It
第六章: 实现Windows安全
Overview

Securing Desktops and Services by Using Security Policies Auditing Access to System Resources

Securing Desktops and Services by Using Security Policies
Implementing Security Policies by Using Local Security Policy
Accessories Administrative Tools Startup Internet Explorer Outlook Express
Group Policy
Implementing Security Policies by Using Group Policy
Use of Resources Success or Failure Logged
Event Viewer
User1 logon failed Access denied Printing successful

Auditing Tracks User and Operating System Activities Audit Entries Contain Actions Performed, Users Who Performed the Actions, and Success or Failure of the Events Audit Policy Defines the Types of Security Events That Windows 2000 Records You Set Up an Audit Policy to Track Success or Failure of Events, Identify Unauthorized Use of Resources, and Maintain a Record Activity You View Security Logs in Event Viewer
IPSec policies Configure IP security on a network Event log Restricted groups System services Configures settings for application logs, system logs, and security logs Configures group memberships for security sensitive groups Configure security and startup settings for services running on a computer
Implementing Security Policies
Event Viewer Internet Services Manager Licensing Local Security Policy Performance Routing and Remote Access Server Extensions Administrator Services Telnet Server Administration
User gains access to a file, folder, or printer Change is made to the user security options, user rights, or Audit policies User exercises a right, such taking ownership of a file
Compatible

Secure
Provides
High
Enforces
Creating Custom Security Templates
To create a custom security template
Add the Security Template snap-in to MMC Select the template to customize Configure the new policy settings Save the new configuration
Registry
File system
Configures security on registry keys
Configures security on specific file paths
Using Predefined Security Templates
Basic
Defines the

Implementing Security Policies


Modifying Security Settings
Using Predefined Security Templates Creating Custom Security Templates Analyzing Security Configuring and Analyzing Security from a Command Line
Determine Whether to Audit the Success or Failure of Events, or Both Determine Whether You Need to Track Trends
Review Security Logs Frequently
Setting Up an Audit Policy
Process Tracking Application performs an action
System
User restarts or shuts down the computer
Planning an Audit Policy
Determine the Computers on Which to Set Up Auditing Determine Which Events to Audit
Analyzing Security
Local Security Settings Console Window Action View Help
Favorites Policy Database Setting Computer Setting None. Rely on … Disabled Disabled Administrators 15 minutes Disabled Disabled Disabled Enabled Disabled Disabled Enabled

Introduction to Auditing Selecting Events to Audit


Planning an Audit Policy
Setting Up an Audit Policy Auditing Access to Resources
Introduction to Auditing
Modifying Security Settings
Account policies Local policies Public key policies
Configure password and account policies
Configure auditing, user rights, and security options Configure encrypted data recovery agents, domain roots, trusted certificate authorities, etc.



Selecting Events to Audit
Event
Account Logon
Example
Domain controller receives a request to validate a user account
Account Administrator creates, changes, or deletes a user account or group Management Directory Service User gains access to an Active Directory object Access User logs on or off a local computer Logon Object Access Policy Change Privilege Use
Template (.inf file)
Analysiter Settings
Lab A: Configuring Windows 2000 Security Settings
Auditing Access to System Resources
default security level for Windows 2000 Lowers selected security settings to enable users to run non-Windows 2000 certified applications without the user having to be a member of the Power Users group increased security for areas of the operating system that are not covered by permissions the maximum security for Windows 2000–based computers that operate in a network where all of the computers are Windows 2000–based computers