Admin Tips
- Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base
  - Windows 2000
    - Admin Tips
      - Security

Knowledge Base Tips topic

[	4069	]	Windows Server 2008/2003/2000/XP/NT Administrator Knowledge Base	Last updated: May 23, 2012
[	335	]	Admin Tips	Last updated: May 22, 2012
[	18	]	Registry Tips	Last updated: May 03, 2012
[	4	]	User Tips	Last updated: Feb 07, 2012

Security Tips

Sort By: Title | Date | Rating

Adding Pop-Up Blocker Exceptions via GPO: Date - Dec 22, 2005; Rating - 4.1; Author - Chris Sanders; Occasionally there are sites that we as domain administrators need to allow pop-ups for across the board. This tip shows how to do this with Group Policy.
Backdoors : backorifice, subseven, netbus: Date - Apr 20, 2004; Rating - 2.9; Author - Wayne Maples
Block users from installing MSI installed applications: Date - Apr 20, 2004; Rating - 3.7; Author - Wayne Maples
Change Detection / Integrity Resource / Rootkits: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Configure Windows 2000 stack to resist network Denial of Service: Date - Apr 20, 2004; Rating - 4.4; Author - Wayne Maples
Disable Enumeration of SID's: Date - Mar 08, 2005; Rating - 4.4; Author - Tony Bradley; One way for an attacker to scope out a target system and, particularly, to identify the Administrator account so they can focus their efforts on the account with the most privileges is to list, or enumerate, the SID's (serial identifiers) on a Windows machine.
Disable Windows NT alt-ctrl-del dialog buttons: Date - Apr 20, 2004; Rating - 4.2; Author - Wayne Maples
Disable Windows Scripting Host ( WSH ): Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Enable Security Event Logging: Date - Dec 16, 2004; Rating - 4.5; Author - Tony Bradley; Installing an alarm system on your home or car can be an effective way of at least being alerted when some sort of intrusion has been attempted. Of course, they don't work very well when they aren't enabled. Windows XP comes with the means to detect and log security events so that you can monitor and respond to intrusions or attempted security breaches, however it is not enabled by default.
Enforce strong passwords: Date - Apr 20, 2004; Rating - 4.1; Author - Wayne Maples
Gaps in Security Log: Date - Jul 14, 2005; Rating - 4.7; Author - Mitch Tulloch; You found a gap of several hours in your Security log, what does it mean?
Get the Latest ADM Files: Date - Jul 12, 2005; Rating - 2.8; Author - Mitch Tulloch; How to obtain the latest Administrative Template files from Microsoft.
Google Yourself To Identify Security Holes: Date - Mar 15, 2005; Rating - 4; Author - Tony Bradley; Google is very good at what it does. It automatically and systematically catalogues every document, image, web site or other data that is web accessible so that it can be quickly retrieved using the Google search engine. That includes potentially sensitive or confidential data that wasn't intended to be shared publicly. Google your own network or sites to identify possible security holes.
Hardening Windows 2000: Date - Apr 20, 2004; Rating - 1; Author - Wayne Maples
How to Import a Third-Party Certificate into the NTAuth Store: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Internet Explorer Security Zones Registry Entries: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
IPSec Tips and Resources: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples
Kerberos and Windows 2000: Date - Apr 20, 2004; Rating - 4.7; Author - Wayne Maples
Keystroke loggers and spy software / hardware: Date - Apr 20, 2004; Rating - 3.7; Author - Wayne Maples
Manage W2K's EFS with EFSinfo: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Map Your Network For Better Protection and Incident Response: Date - Apr 01, 2005; Rating - 3.7; Author - Tony Bradley; It is difficult to protect devices that you don't even know exist. In larger enterprises it is very easy to lose track of the asset inventory which leads to complacency about rogue devices. In order to effectively protect the network and to respond to incidents efficiently, an updated asset inventory and network map should always be handy.
Microsoft Baseline Security Analyzer (MBSA): Date - Mar 07, 2005; Rating - 3.5; Author - Wayne Maples
Microsoft Security Notification Service: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Monitor and capture all text a program writes to the screen: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
NSA Guides to Securing Windows 2000: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Portslock for Windows NT / 2000 / XP: Date - Apr 20, 2004; Rating - 2.5; Author - Wayne Maples
Pre-Windows 2000 Compatible Access Group permission vulnerability: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Protect Wireless Access Using MAC Address Filters: Date - Mar 22, 2005; Rating - 4.1; Author - Tony Bradley; Wireless networks add a significant level of convenience for many users. The ability to roam at will and access the network without adding wires is quite useful. But, you need to do so securely. There are a number of basic steps you should take to protect your wireless network and filtering MAC addresses is one more way to secure it.
Protocol Numbers and Assignment Services: Date - Apr 20, 2004; Rating - 1; Author - Wayne Maples
Remove Administrative Shares: Date - Jan 20, 2005; Rating - 4.4; Author - Tony Bradley; Windows creates hidden Administrative Shares at the root of each drive and to the system root folder to allow administrators to remotely access the data. If a server or workstation will not be administered remotely or has no need for the Administrative Shares though, they should be removed so that they don't provide a potential attack vector for a hacker or malware to enter the system.
Restricting Concurrent Logons: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
Sample security policies and guidelines: Date - Nov 09, 2004; Rating - 2.4; Author - Wayne Maples
Scanners, sniffers, network analyzers, traffic monitors, port scanners: Date - Apr 20, 2004; Rating - 3.3; Author - Wayne Maples
secedit: Date - Apr 20, 2004; Rating - 3.4; Author - Wayne Maples
Securing Windows 2000 Communications with IP Filters: Part Two: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Securing Windows 2000 Communications with IP Security Filters: Part One: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Securing Windows 2000 Network Resources Scenario Guide: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Security Communications, Windows 2000 and the OSI Model: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Setting up Windows 2000 Radius to authenticate wireless 802.1x clients: Date - May 03, 2005; Rating - 4.3; Author - Robert Vegas; How to set up RADIUS on Windows 2000 so you can autheticate wireless clients.
SmbRelay captures NTLM hashes: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples
SQL Server worm exploits blank sa password: Date - Apr 20, 2004; Rating - 4.3; Author - Wayne Maples
SSH / SCP for Windows NT / W2K / XP: Date - Apr 20, 2004; Rating - 3.4; Author - Wayne Maples
Ssh Secure Shell Resources: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Steganography Resources: Date - Apr 20, 2004; Rating - 2.4; Author - Wayne Maples
System Scanner for Windows: Date - Apr 20, 2004; Rating - 4.3; Author - Wayne Maples
Tips for Securing Your Wireless LAN: Date - Feb 04, 2009; Rating - 3.4; Author - Eric Geier; Ways to protect your Wi-Fi network from eavesdroppers and hackers.
Tokenmon monitors NT and Windows 2000 logon/logoff and security privilege token creation/deletion: Date - Apr 20, 2004; Rating - 3; Author - Wayne Maples
Upgrade Windows 2000 installation to 128-bit encryption: Date - Apr 20, 2004; Rating - 3.8; Author - Wayne Maples
Using Reservations to Ensure DHCP Server Availability and Security: Date - Mar 24, 2005; Rating - 3.5; Author - Mitch Tulloch; In high security environments you can use Reservations to ensure the security and availability of DHCP servers.
Wayne's Denial of Service (DoS) Resource: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Wayne's Forensics and Incident Response Resources: Date - Apr 20, 2004; Rating - Not Rated; Author - Wayne Maples
Wayne's IDS Intrustion Detection Systems Tips and Resources: Date - Apr 20, 2004; Rating - 3.8; Author - Wayne Maples
Windows 2000 Default Security Policy Templates: Date - Apr 20, 2004; Rating - 3.7; Author - Wayne Maples
Windows 2000 Encrypting File System EFS: Date - Apr 20, 2004; Rating - 3.1; Author - Wayne Maples
Windows 2000 Security Checklists: Hardening Windows 2000: Date - Apr 20, 2004; Rating - 5; Author - Wayne Maples
Windows 2000 USB Permissions: Date - Apr 20, 2004; Rating - 4.4; Author - Wayne Maples
Windows Freeware and Commercial Personal Firewalls for SOHO Small Office and Home: Date - Apr 20, 2004; Rating - 4; Author - Wayne Maples
XP SP2 Breaks Group Policy: Date - Jun 09, 2005; Rating - 2.8; Author - Mitch Tulloch; Resolving an issue with adm files in XP SP2.