wink checklist v - section mse安全攻防资料

《wink checklist v - section mse安全攻防资料》由会员上传分享，免费在线阅读，更多相关内容在教育资源-天天文库。

1、UNCLASSIFIEDWindows2000SecurityChecklist2.1.11FieldSecurityOperationsSection5DefenseInformationSystemsAgency5MANUALSYSTEMCHECKPROCEDURESFORWINDOWS2000PROFESSIONALANDSERVER.ThissectiondetailstheproceduresthatmaybeperformedontheWindows2000consolethatwillallowthereviewertoan

2、alyzethesystemforsecurityvulnerabilities.AnalysisdeterminesthecompositeeffectLocalpolicyandofGroupPolicyonWIN2KProfessionalandServer,andtoDomainControllerpolicyonDomainControllers.SomeprocedureswilldifferonDomainControllers.Thesewillbehighlightedthroughoutthedocumentwhena

3、pplicable.ThefollowingapplicationsareusedduringthemanualSecurityReadinessReviewprocess:-WindowsExplorer-ComputerManager-ServerManager-MicrosoftManagementConsole-ControlPanel-RegistryEditor-DumpSec-CommandPromptTheDumpSecapplicationisananalysistoolthatpermitstheusertosyste

4、maticallyreviewACL,audit,anduserinformationfromthelocalsystem.ThistoolisnotincludedwiththebasicinstallationofWindows2000,butmaybeacquiredordownloadfromSomarSoft,Inc.(www.somarsoft.com).ThefindingsdiscoveredduringtheexecutionoftheseproceduresmaybemappedtothePDIsfoundinSect

5、ion2.NOTE:InaWindows2000Domain,thereviewshouldbedonewiththereviewerloggedontothedomain.ThereviewwillthenrevealtheactualeffectivesettingsontheboxthatmayresultfromacombinationofGroupandLocalpolicies.A“G”symbolappearinginasectiontitleindicatesaPlatinumStandardsetting.A“i”sym

6、bolappearinginasectionindicatesthattheSRRscriptmayreturnafalsefinding.Thereviewershouldreviewthefindingoutputtodetermineifthepotentialfindingisvalid.Thelabel“(FutureCheck)”nexttoasectiontitleistoalertsitesthatthisisanewcheckthatwillbecomeactiveinthenearfuture.Thisismeantt

7、ogivesitessufficienttimetoincorporatethesechangespriortobeingheldaccountableinaSecurityReadinessReview.5-101UNCLASSIFIED5-101UNCLASSIFIEDWindows2000SecurityChecklist2.1.11FieldSecurityOperationsSection5DefenseInformationSystemsAgency5MANUALSYSTEMCHECKPROCEDURESFORWINDOWS2

8、000PROFESSIONALANDSERVER.5-15.1UpdatingtheWindows2000SecurityOptionsFile5-55.2Using“WindowsExplo