Locking Down Windows 2000 Server - Tech Learning

Locking Down Windows 2000 Server

Question: We are running Windows 2000 server and I know it came out of the box much less secure than Windows 2003 server does. How can I lock down Windows 2000 server? The IT Guy says: You are correct, Windows 2000 by default is configured with many more services enabled and vulnerabilities exposed than Windows
Author:
Publish date:

Question: We are running Windows 2000 server and I know it came out of the box much less secure than Windows 2003 server does. How can I lock down Windows 2000 server?

The IT Guy says:
You are correct, Windows 2000 by default is configured with many more services enabled and vulnerabilities exposed than Windows 2003 server. I highly recommend locking down your server by shutting off unneeded services and limiting user access as tightly as possible.

Certainly you can manually lock down Windows 2000 server, but Microsoft has created some free tools that make the process much easier. The IIS Lockdown Tool is a free download that will help you enable or remove unneeded Windows 2000 server features. It also integrates the free URLScan webtool, which can restrict useable URL syntax actions / acceptable URL verbs. URLScan comes with Windows 2003 server and IIS 6.0, but must be downloaded separately for IIS 5.0 or used as part of the IIS Lockdown tool.

Beware that URLScan can lock down your server too much and impair functionality, so look carefully at the list of verbs it disallows to make sure your server applications will not be negatively impacted. URLScan can prevent your server from being overwhelmed by poorly formed URLs or hacker attacks, and, as a free tool, the price can’t be beat.

Next Tip: Recommendations for Teacher Website Creation Tools

Featured

Related

Remote Control Macintosh and Windows Servers

Question: Our district has both Windows-based and Macintosh servers, and I would like to use the same program to remote control both server types. Do you know of a software solution that can do this? The IT Guy says: Timbuktu Pro Remote Control Software can do this. An enterprise version is available also, if you

Windows 2000 not shutting down part 2

Question: If suggested fixes don't work and my computer still has problems shutting down, where can I go for advice? The IT Guy says: Microsoft has a thorough knowledge base article available on this issue entitled, "How to Troubleshoot Problems with Standby Mode, Hibernate Mode, and Shutting Down Your Computer

Don’t Lock it Down

I received an email today from an internet company that promised to “help teachers bring the power of the Internet to the classroom without the distractions that come with it.”

Podcast server?

Question: Several teachers in our district have started podcasts, and I am wondering if we should host the podcast audio files on a separate web server. The IT Guy says: Technically speaking, there is no requirement to host podcasts on a special server. Any Website capable of serving Web content can host podcast

Exchange Server Virus Scanning

Question: What product would you recommend for virus scanning on our Exchange mail server? The IT Guy says: Sybari's Antigen for Microsoft Exchange is a robust virus scanning solution for districts running MS Exchange. It provides the ability for real-time scanning of incoming and outgoing messages. The "worm

Measuring Server Traffic

Question: What server software tool do you recommend for measuring Internet traffic? The IT Guy says: The Webalizer is fast, free, and provides fairly comprehensive web server traffic reports. Reports are broken down by month, day, and hour, and reports can be accessed dynamically throughout the day as

PHP for Windows NT 4

Question: Can I install PHP on an NT 4.0 server? How? The IT Guy says: Yes, you can install PHP on Windows NT as well as other variants of the Windows OS server. There are several places to download PHP and obtain specific installation instructions. One of the best is http://www.php.net. Next Tip:

Districts Adopt Windows 8

Microsoft Corp. today announced that 10 K–12 school districts and higher-education institutions have signed on to use Windows 8 for more than 540,000 students and faculty to prepare students for futures in college and careers.